๐ซ๐ท
โจ
2026-11-06 23:10:07
UTC ยท
(3 days ago)
Domain : roneservices.com
Rule : config
2026-11-03 23:59:53 W3SVC308 PLESK72 79.171.39.6 GET /.git/config - 443 - 34.47.69.42 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - - roneservi ...
show more
Domain : roneservices.com
Rule : config
2026-11-03 23:59:53 W3SVC308 PLESK72 79.171.39.6 GET /.git/config - 443 - 34.47.69.42 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - - roneservices.com 404 8 0 9002 284 249 - -
show less
Hacking
SQL Injection
๐ซ๐ท
โจ
2026-11-04 00:01:23
UTC ยท
(6 days ago)
Domain : roneservices.com
Rule : config
2026-11-03 23:59:53 W3SVC308 PLESK72 79.171.39.6 GET /.git/config - 443 - 34.47.69.42 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - - roneservi ...
show more
Domain : roneservices.com
Rule : config
2026-11-03 23:59:53 W3SVC308 PLESK72 79.171.39.6 GET /.git/config - 443 - 34.47.69.42 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - - roneservices.com 404 8 0 9002 284 249 - -
show less
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-11-03 23:14:22
UTC ยท
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:14:19.216966 2026] [security2:error] [pid 14174:tid 1417 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:14:19.216966 2026] [security2:error] [pid 14174:tid 14174] [client 34.47.69.42:40106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ronelgas.com"] [uri "/.git/config"] [unique_id "aupqy56KnrLO-yRNlTDF0QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-11-03 23:03:23
UTC ยท
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
๐ณ๐ฑ
debestelapp
2026-11-03 22:30:10
UTC ยท
(6 days ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-03 22:28:46
UTC ยท
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:28:40.058341 2026] [security2:error] [pid 22691:tid 2269 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:28:40.058341 2026] [security2:error] [pid 22691:tid 22691] [client 34.47.69.42:57976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondrez.com"] [uri "/.git/config"] [unique_id "aupgGG79Ire396BIhe1kMAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-11-03 22:02:01
UTC ยท
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-11-03 19:35:54
UTC ยท
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:35:47.859841 2026] [security2:error] [pid 4452:tid 4452] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 14:35:47.859841 2026] [security2:error] [pid 4452:tid 4452] [client 34.47.69.42:52786] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondeal.com"] [uri "/.git/config"] [unique_id "auo3k8JV9AXfvRP5iQn4hQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-11-03 19:21:18
UTC ยท
(6 days ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
pipeline.es
2026-11-03 19:11:59
UTC ยท
(6 days ago)
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: rondatur.pt 34.47.69.42 - - [03/Nov/2026:20:09:51 +0100] \"GET /administrator/.env HTTP/1.1\" 404 20944 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/5 ...
show more
Web scanning / probing for vulnerable paths | URL: /administrator/.env | Evidence: rondatur.pt 34.47.69.42 - - [03/Nov/2026:20:09:51 +0100] \"GET /administrator/.env HTTP/1.1\" 404 20944 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=KR 23447 | ASN: GOOGLE-CLOUD-PLATFORM | Country: KR
show less
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-11-03 07:09:03
UTC ยท
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:08:55.574806 2026] [security2:error] [pid 14237:tid 1423 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.69.42 (42.69.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 02:08:55.574806 2026] [security2:error] [pid 14237:tid 14237] [client 34.47.69.42:44710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timberwolf-construction.com"] [uri "/.git/config"] [unique_id "aumIh7WrLKE2OOObj3Si0AAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-11-03 06:17:21
UTC ยท
(6 days ago)
161 attacks on env grabbing URLs, PHP URLs, VC URLs:
GET /bulk/.env HTTP/1.1
GET /smtp/phpinfo.php HTTP/1.1
GET /.git/config HTTP/1.1
Hacking
Web App Attack
Anonymous
2026-11-03 04:13:17
UTC ยท
(6 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
Anonymous
2026-11-03 02:51:20
UTC ยท
(6 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-11-03 01:17:31
UTC ยท
(6 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack