🇩🇪
Vegascosmetics
2025-09-12 21:52:17
UTC ·
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇺🇸
octageeks.com
2025-09-12 04:06:35
UTC ·
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
iNetWorker
2025-09-11 23:04:29
UTC ·
(1 year ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
LRob
2025-09-11 22:46:37
UTC ·
(1 year ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 22:22:16
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 18:22:10.501141 2025] [security2:error] [pid 29296:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 18:22:10.501141 2025] [security2:error] [pid 29296:tid 29296] [client 34.66.58.118:40940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gods-law.com"] [uri "/.git/config"] [unique_id "aMNLkqBzuvBaFyho87_9iQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2025-09-11 21:57:02
UTC ·
(1 year ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 21:31:38
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 17:31:35.142387 2025] [security2:error] [pid 20863:tid 20 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 17:31:35.142387 2025] [security2:error] [pid 20863:tid 20863] [client 34.66.58.118:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.globetechsecurities.com"] [uri "/.git/config"] [unique_id "aMM_t8cVcdvv53qAcVmMjwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Jordy
2025-09-11 20:17:21
UTC ·
(1 year ago)
11/Sep/2025:22:17:21.088413 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.66.58.118] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTAC ...
show more
11/Sep/2025:22:17:21.088413 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.66.58.118] ModSecurity: Warning. Matched phrase "/.git/" at REQUEST_FILENAME. [file "/usr/share/modsecurity-crs/rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "www.fc-pilsener.nl"] [uri "/.git/config"] [unique_id "aMMuUSGF3q_Pr5cxaOKp-gAAAAg"]
11/Sep/2025:22:17:21.088413 +0200Apache-Error: [file "apache2_util.c"] [line 275] [level 3] [client 34.66.58.118] ModSecurity: Warning. Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 19:55:48
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:55:42.214851 2025] [security2:error] [pid 32276:tid 32 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:55:42.214851 2025] [security2:error] [pid 32276:tid 32276] [client 34.66.58.118:34792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fatparrots.org"] [uri "/.git/config"] [unique_id "aMMpPnH1O1fsJKg1ZqVsFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 19:25:32
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:25:24.679261 2025] [security2:error] [pid 12537:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:25:24.679261 2025] [security2:error] [pid 12537:tid 12537] [client 34.66.58.118:55738] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.farmers123.com"] [uri "/.git/config"] [unique_id "aMMiJP2gTI_7U5JjilJ-6QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
ingroscart.it
2025-09-11 19:09:03
UTC ·
(1 year ago)
(mod_security) mod_security triggered on hostname [redacted] 34.66.58.118 (US/United States/118.58.66.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
TPI-Abuse
2025-09-11 19:03:23
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:03:15.531190 2025] [security2:error] [pid 11984:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 15:03:15.531190 2025] [security2:error] [pid 11984:tid 11984] [client 34.66.58.118:59248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.fancycleaners.com"] [uri "/.git/config"] [unique_id "aMMc8xbB2rFTBf56YLwcywAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-09-11 17:59:44
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 13:59:40.841000 2025] [security2:error] [pid 14615:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.58.118 (118.58.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 11 13:59:40.841000 2025] [security2:error] [pid 14615:tid 14615] [client 34.66.58.118:37872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kristasrecoverycoaching.com.kildarafarms.com"] [uri "/.git/config"] [unique_id "aMMODGK6nJcTlslx-aZCMwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2025-09-11 17:47:46
UTC ·
(1 year ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
🇩🇪
Kreapptivo
2025-09-11 17:47:42
UTC ·
(1 year ago)
[11/Sep/2025:19:47:41 +0200] Web-Request: "GET /.git/config", User-Agent: "-"
Bad Web Bot
Web App Attack