๐จ๐ฆ
polycoda
2026-09-24 01:13:14
(11 hours ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
robotstxt
2026-09-22 07:32:27
(2 days ago)
34.6.175.245 - - [22/Sep/2026:07:31:35 +0000] "GET /.env HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; ...
show more
34.6.175.245 - - [22/Sep/2026:07:31:35 +0000] "GET /.env HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.6.175.245"
34.6.175.245 - - [22/Sep/2026:07:31:35 +0000] "GET /.env.local HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.6.175.245"
34.6.175.245 - - [22/Sep/2026:07:31:36 +0000] "GET /.env.production HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.6.175.245"
34.6.175.245 - - [22/Sep/2026:07:31:36 +0000] "GET /.env.staging HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.6.175.245"
34.6.175.245 - - [22/Sep/2026:07:31:36 +0000] "GET /.env.development HTTP/1.1" 403 17842 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/5
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 07:26:43
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 03:26:39.797987 2026] [security2:error] [pid 1939:tid 1975] [client 34.6.175.245:37122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "internationalboardofstandards.com"] [uri "/.git/config"] [unique_id "arItrx-bwBm3wi_4y_2OUgAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:30:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:30:27.004249 2026] [security2:error] [pid 3329:tid 3329] [client 34.6.175.245:51112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insidepublications.com"] [uri "/.git/config"] [unique_id "arG-EzWcIxwPeivMT46hIgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 20:37:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 16:37:50.469078 2026] [security2:error] [pid 24755:tid 24755] [client 34.6.175.245:33098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insearchofacure.org"] [uri "/.git/config"] [unique_id "arGVnhJrfNWQFr6NIQD3BgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 04:18:16
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 00:18:12.061861 2026] [security2:error] [pid 28958:tid 28976] [client 34.6.175.245:47574] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pdcoc.com"] [uri "/.git/config"] [unique_id "arCwBDLJK_mudUVnf6Fl2QAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
rubixstudios
2026-09-21 03:22:02
(3 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-09-21 02:31:40
(3 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /barometre/.git/config | 2026-09-21 02:31 UTC
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-09-20 20:58:52
(3 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 19:02:22
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.6.175.245 (245.175.6.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:02:15.131175 2026] [security2:error] [pid 9960:tid 9960] [client 34.6.175.245:33100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "makegoodsausage.com"] [uri "/.git/config"] [unique_id "arAttyoKTQ425OnjdNUuxQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 19:00:10
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack