2025-09-20 04:31:56
UTC ·
(1 year ago)
Failed login attempt detected by Fail2Ban in recidive jail
Brute-Force
🇺🇸
TPI-Abuse
2025-09-19 21:40:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 17:40:18.139363 2025] [security2:error] [pid 1781:tid 178 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 17:40:18.139363 2025] [security2:error] [pid 1781:tid 1781] [client 34.48.29.130:36950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "takemehomedogrescue.org"] [uri "/.git/config"] [unique_id "aM3Nwp1VFIKHZImT5QxVmwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2025-09-19 20:40:32
UTC ·
(1 year ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇫🇷
dynamix
2025-09-19 20:24:57
UTC ·
(1 year ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 20:16:16
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 16:16:08.531525 2025] [security2:error] [pid 11415:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 16:16:08.531525 2025] [security2:error] [pid 11415:tid 11415] [client 34.48.29.130:34132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "t5-online.powerastronomy.com"] [uri "/.git/config"] [unique_id "aM26COY_JfC0YXuZNERNoAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
AvonleaConsulting
2025-09-19 19:29:53
UTC ·
(1 year ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 19:25:47
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 15:25:43.641890 2025] [security2:error] [pid 31687:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 15:25:43.641890 2025] [security2:error] [pid 31687:tid 31687] [client 34.48.29.130:36876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "suefellows.com"] [uri "/.git/config"] [unique_id "aM2uNxYn8PifuCgrRhwIQQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-09-19 19:25:44
UTC ·
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
mnsf
2025-09-19 19:05:27
UTC ·
(1 year ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-09-19 18:54:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 14:54:51.674898 2025] [security2:error] [pid 28784:tid 28 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 14:54:51.674898 2025] [security2:error] [pid 28784:tid 28784] [client 34.48.29.130:37328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "submissions.freedrm.org"] [uri "/.git/config"] [unique_id "aM2m-4FAfu3n3HStUJjIdwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2025-09-19 18:46:02
UTC ·
(1 year ago)
Domain : subastame.net
Rule : config
2025-09-19 18:45:09 152.53.151.170 GET /.git/config - 80 - 104.23.213.61 HTTP/1.1 - - subastame.net 404 8 0 5177 301 344 - 34.48.29.130
Hacking
SQL Injection
🇩🇪
Kreapptivo
2025-09-19 18:20:47
UTC ·
(1 year ago)
[19/Sep/2025:20:20:47 +0200] Web-Request: "GET /.git/config", User-Agent: "-"
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2025-09-19 18:07:50
UTC ·
(1 year ago)
(mod_security) mod_security (id:949110) triggered by 34.48.29.130 (US/United States/130.29.48.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇩🇪
kranem
2025-09-19 18:00:24
UTC ·
(1 year ago)
Triggered Cloudflare WAF from US.
Action taken: BLOCK
ASN: 396982 (GOOGLE-CLOUD-PLATFORM)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Timestamp: 2025-09-19T15:24:41Z
User-Agent: empty
Bad Web Bot
🇺🇸
TPI-Abuse
2025-09-19 17:53:15
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 13:53:07.961994 2025] [security2:error] [pid 14067:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.29.130 (130.29.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 19 13:53:07.961994 2025] [security2:error] [pid 14067:tid 14067] [client 34.48.29.130:38316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomhatcher.us"] [uri "/.git/config"] [unique_id "aM2Yg2EKw3ekAxzLvailJAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack