Anonymous
2026-09-01 21:20:34
(18 minutes ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
NihiliousMonk
2026-09-01 18:58:57
(2 hours ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 15:04:08
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 11:04:02.888511 2026] [security2:error] [pid 20333:tid 20333] [client 34.88.83.179:46788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "us-war-crimes-commission.org"] [uri "/www/.git/config"] [unique_id "apbpYmmBm_-bh92exbso9QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-09-01 13:34:38
(8 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /app/.git/config (+11 more) | 2026-09-01 13:34 UTC
show less
Hacking
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-01 12:02:30
(9 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฌ๐ง
AvonleaConsulting
2026-09-01 10:10:21
(11 hours ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:59:06
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:59:02.364221 2026] [security2:error] [pid 30885:tid 30885] [client 34.88.83.179:46400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.juyla.com"] [uri "/backend/.git/config"] [unique_id "apah5pxQTXhHmZzr2sSyCAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
P1n4
2026-09-01 09:07:54
(12 hours ago)
Heimdal IDS auto-block: sensitive_file (score=1.00)
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-09-01 09:07:51
(12 hours ago)
[Tue Sep 01 19:07:50.492807 2026] [security2:error] [pid 229902] [client 34.88.83.179:60998] [client ...
show more
[Tue Sep 01 19:07:50.492807 2026] [security2:error] [pid 229902] [client 34.88.83.179:60998] [client 34.88.83.179] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/site/.git/config"] [unique_id "apaV5nK8ilyqleCvohQ-AgAAAA0"]
...
show less
Web App Attack
๐ฉ๐ช
london2038.com
2026-09-01 09:01:44
(12 hours ago)
Probing for exploits
34.88.83.179 - - [01/Sep/2026:11:01:40 +0200] "GET /backend/.git/config HTTP/1. ...
show more
Probing for exploits
34.88.83.179 - - [01/Sep/2026:11:01:40 +0200] "GET /backend/.git/config HTTP/1.1" 422 0 "-" "crusader-worker/1.0"
34.88.83.179 - - [01/Sep/2026:11:01:40 +0200] "GET /wordpress/.git/config HTTP/1.1" 422 0 "-" "crusader-worker/1.0"
show less
Hacking
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-01 07:15:04
(14 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 05:47:08
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:47:02.285075 2026] [security2:error] [pid 11998:tid 11998] [client 34.88.83.179:47604] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "what-is-a-smog-check.smogsandiego.com"] [uri "/public/.git/config"] [unique_id "apZm1taNGfAsdQVgnqrcvwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 05:22:54
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.83.179 (179.83.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:22:46.920385 2026] [security2:error] [pid 7897:tid 7897] [client 34.88.83.179:57092] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gopherblower.com.rotarymagnetics.com"] [uri "/app/.git/config"] [unique_id "apZhJu_4Zx9YbIJWJjF_DAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-01 05:20:04
(16 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-09-01 05:13:44
(16 hours ago)
12 attacks on VC URLs:
GET /public/.git/config HTTP/1.1
Hacking