๐ณ๐ฑ
debestelapp
2026-09-24 08:26:15
(9 hours ago)
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-24 06:00:03
(11 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐บ๐ธ
TPI-Abuse
2026-09-24 02:49:11
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:49:05.376921 2026] [security2:error] [pid 15316:tid 15316] [client 34.66.6.160:48876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.usaangelinvestors.com"] [uri "/app/.git/config"] [unique_id "arSPoeUGOQuNmCL-0Hg3VwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 02:11:51
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:11:43.605861 2026] [security2:error] [pid 16195:tid 16195] [client 34.66.6.160:50426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.jonnyonthespot.biz"] [uri "/wordpress/.git/config"] [unique_id "arSG378DjrQFH6jhn0vWIgAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Catalin Negru
2026-09-24 01:53:24
(15 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-24 01:38:26
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:38:21.143691 2026] [security2:error] [pid 16455:tid 16455] [client 34.66.6.160:50968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.agingworkforcenews.com"] [uri "/html/.git/config"] [unique_id "arR_DW7VwMCkHCJJKkz2LQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-24 01:31:53
(16 hours ago)
531 requests with url.path */.git/config
307 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐ฎ๐น
VHosting
2026-09-24 01:10:05
(16 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-23 22:50:39
(18 hours ago)
[24/Sep/2026:01:50:39 +0300] -- 34.66.6.160 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/c ...
show more
[24/Sep/2026:01:50:39 +0300] -- 34.66.6.160 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 18:20:47
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 14:20:43.148456 2026] [security2:error] [pid 18884:tid 18884] [client 34.66.6.160:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cdn-1.socialstudiesforkids.com"] [uri "/html/.git/config"] [unique_id "arQYe77HUhTceD2b7r5XkgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-23 17:26:09
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 16:25:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.66.6.160 (160.6.66.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 12:25:51.333537 2026] [security2:error] [pid 23663:tid 23663] [client 34.66.6.160:45868] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cabanaconstructionandpaving.com"] [uri "/app/.git/config"] [unique_id "arP9j-rIfQA0IAwAwKlf3gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-23 12:50:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-09-23 11:55:12
(1 day ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /backend/.git/config (+11 more) | 2026-09-23 11:55 UTC
show less
Hacking
Web App Attack
๐ต๐ฑ
lns.bz
2026-09-23 10:31:37
(1 day ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack