🇬🇧
consul.to
2026-06-15 09:45:58
(23 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇿
Antinson
2026-06-15 09:15:52
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 07:48:19
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:48:13.301127 2026] [security2:error] [pid 31509:tid 31509] [client 34.64.168.1:43954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.home.ryanc.net"] [uri "/v1/.git/config"] [unique_id "ai-uPZsDENxsKmVz_zF_7QAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-15 06:28:51
(1 day ago)
4.233 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 06:08:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:08:47.929786 2026] [security2:error] [pid 19741:tid 19741] [client 34.64.168.1:54666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.thebestac.com"] [uri "/.git/config"] [unique_id "ai-W7yRO1HxPDDBsPnJbpAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:46:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:46:44.356606 2026] [security2:error] [pid 13942:tid 13942] [client 34.64.168.1:52888] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "odinscelestialtrust.org"] [uri "/blog/.git/config"] [unique_id "ai-RxAtJ8P1gQYCvRELZmgAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-06-15 05:05:50
(1 day ago)
*
Brute-Force
SSH
🇮🇹
Progetto1
2026-06-15 05:05:02
(1 day ago)
Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 05:00:30
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:00:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:00:14.431213 2026] [security2:error] [pid 13766:tid 13766] [client 34.64.168.1:39236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bnaiisraelkearny.royal-barbershop.com"] [uri "/app/.git/config"] [unique_id "ai-G3ivsLoydKSbtk8RzoAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-15 03:33:55
(1 day ago)
Try to access /.git/config
Web App Attack
🇫🇷
pm33
2026-06-15 03:22:18
(1 day ago)
Excessive crawling HTTP 404
Web App Attack
🇧🇪
voormedia
2026-06-15 03:01:43
(1 day ago)
Accessed trap at '/.git/config'
Web App Attack
🇩🇪
4server
2026-06-15 02:37:27
(1 day ago)
[MonJun1504:37:21.3205532026][security2:error][pid3364310:tid3364320][client34.64.168.1:0]ModSecurit ...
show more
[MonJun1504:37:21.3205532026][security2:error][pid3364310:tid3364320][client34.64.168.1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"feldenkraistherapy.ch.136-243-54-122.cpanel.site\"][uri\"/static/.git/config\"][unique_id\"ai9lYctimeK0es7A4q7qMgAAAEc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:59:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.168.1 (1.168.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:59:42.279753 2026] [security2:error] [pid 23319:tid 23319] [client 34.64.168.1:33462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnsshoehospital.com"] [uri "/src/.git/config"] [unique_id "ai9cjgWpTyNSQgky_POEKQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack