🇺🇸
mnsf
2026-09-02 10:05:17
UTC ·
(2 months ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-09-02 07:06:22
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-02 05:46:02
UTC ·
(2 months ago)
[da.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/api/.git/config | /.git/config | /src/.git/config
Hacking
Web App Attack
🇫🇷
HerrWolf
2026-09-02 05:45:05
UTC ·
(2 months ago)
CrowdSec Detection: crowdsecurity/http-probing
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:00:18
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:00:11.599224 2026] [security2:error] [pid 13091:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:00:11.599224 2026] [security2:error] [pid 13091:tid 13091] [client 34.58.148.225:51760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jinglybits.com"] [uri "/wordpress/.git/config"] [unique_id "apetW27G3aBXS6ekAQp36gAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-02 04:35:01
UTC ·
(2 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 03:36:44
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:36:37.897507 2026] [security2:error] [pid 18230:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:36:37.897507 2026] [security2:error] [pid 18230:tid 18230] [client 34.58.148.225:37446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dpcfab.com"] [uri "/public/.git/config"] [unique_id "apeZxdGag5iphh0nv_EyUwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Séfora Srl
2026-09-02 03:15:07
UTC ·
(2 months ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
🇩🇪
Philister11
2026-09-02 02:27:52
UTC ·
(2 months ago)
CrowdSec: crowdsecurity/http-probing (US/AS396982)
Web App Attack
Hacking
🇬🇧
consul.to
2026-09-02 02:10:52
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 00:33:28
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:33:20.914840 2026] [security2:error] [pid 1042456:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:33:20.914840 2026] [security2:error] [pid 1042456:tid 1042485] [client 34.58.148.225:51336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getfullyconnected.com.richardleeweatherman.com"] [uri "/htdocs/.git/config"] [unique_id "apdu0JHZ0DOpF4nuszEFTgAAAFg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-02 00:13:34
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
4server
2026-09-01 23:16:13
UTC ·
(2 months ago)
[WedSep0201:16:11.5745752026][security2:error][pid645439:tid645522][client34.58.148.225:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[WedSep0201:16:11.5745752026][security2:error][pid645439:tid645522][client34.58.148.225:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"traslochiamo.ch\"][uri\"/htdocs/.git/config\"][unique_id\"apdcu-tAfKLUG3OUwUmu4QAAAI0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
RogueAutomata
2026-09-01 14:22:28
UTC ·
(2 months ago)
Detected malicious request: GET /var/www/.git/config
Detections triggered: Environment/config probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 13:29:26
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:29:18.325017 2026] [security2:error] [pid 20577:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.148.225 (225.148.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:29:18.325017 2026] [security2:error] [pid 20577:tid 20577] [client 34.58.148.225:46636] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bosch.pamplonaserviciotecnico.com"] [uri "/api/.git/config"] [unique_id "apbTLskOjzkSRGVb6dODNwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack