๐บ๐ธ
TPI-Abuse
2026-06-15 16:21:14
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 12:21:06.173879 2026] [security2:error] [pid 24256:tid 24256] [client 34.93.136.202:59734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "riedmannfamily.com"] [uri "/symfony/.git/config"] [unique_id "ajAmcnGdZ4T1QlaMsmU0agAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
LoneRider
2026-06-15 14:20:46
(18 hours ago)
[15/Jun/2026:16:20:45.067682 +0200] ajAKPTHoac_rl8avUwTIagAAAAY 34.93.136.202 36584 127.0.0.1 7081
[ ...
show more
[15/Jun/2026:16:20:45.067682 +0200] ajAKPTHoac_rl8avUwTIagAAAAY 34.93.136.202 36584 127.0.0.1 7081
[15/Jun/2026:16:20:45.072475 +0200] ajAKPcVIDtLBoBNNrHB-HwAAAAQ 34.93.136.202 36594 127.0.0.1 7081
[15/Jun/2026:16:20:45.072753 +0200] ajAKPfiWX9_Ce3sYl3SY3wAAAAs 34.93.136.202 36592 127.0.0.1 7081
...
show less
Hacking
๐บ๐ธ
mc4bbs
2026-06-15 13:17:37
(19 hours ago)
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: ...
show more
Automated Apache detection on Windows host. 5 suspicious HTTP requests within 300 seconds. Examples: GET /.git/config -> 404 UA=""; GET /static/.git/config -> 404 UA=""; GET /dist/.git/config -> 404 UA=""; GET /wordpress/.git/config -> 404 UA=""; GET /app/.git/config -> 404 UA=""
show less
Web App Attack
Hacking
๐ณ๐ฑ
Savvii
2026-06-15 12:16:23
(20 hours ago)
20 attempts against mh-misbehave-ban on storm
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 10:02:28
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:02:21.678827 2026] [security2:error] [pid 8802:tid 8802] [client 34.93.136.202:35270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elkesmuesli.systemcapacityoptimization.com"] [uri "/admin/.git/config"] [unique_id "ai_NrZZrI16t5yDt88acwwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
WebNiraj
2026-06-15 09:13:08
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.93.136.202 (IN/India/202.136.93.34.bc.google ...
show more
(mod_security) mod_security (id:949110) triggered by 34.93.136.202 (IN/India/202.136.93.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
๐บ๐ธ
mnsf
2026-06-15 00:18:30
(1 day ago)
Too many Status 40X (12)
Scanning/Probing (30)
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-06-15 00:16:52
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 00:09:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:09:17.211029 2026] [security2:error] [pid 32498:tid 32498] [client 34.93.136.202:42244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "harintonmechanical.com"] [uri "/htdocs/.git/config"] [unique_id "ai9CrUcqJUqptZ--foVyUgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
antlac1
2026-06-14 23:43:38
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 23:43:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:43:26.204066 2026] [security2:error] [pid 25155:tid 25155] [client 34.93.136.202:58864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlfink.name"] [uri "/htdocs/.git/config"] [unique_id "ai88nsAQPAPVc3504qsREAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 22:45:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:45:24.995361 2026] [security2:error] [pid 19240:tid 19240] [client 34.93.136.202:39644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbaydeliveries.jbaycabs.com"] [uri "/.git/config"] [unique_id "ai8vBNKZFN51OpWGEPSAlAAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 22:16:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:16:43.017859 2026] [security2:error] [pid 7236:tid 7236] [client 34.93.136.202:46500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lovebuilds.com"] [uri "/v2/.git/config"] [unique_id "ai8oS14wNYnE8tNGTXasdAAAAHo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 21:22:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.136.202 (202.136.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:22:12.477169 2026] [security2:error] [pid 11356:tid 11356] [client 34.93.136.202:53378] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mecme.co"] [uri "/assets/.git/config"] [unique_id "ai8bhBxk51oAeGLKtWmFNwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-14 21:06:55
(1 day ago)
[SunJun1423:06:51.6416632026][security2:error][pid2397636:tid2397656][client34.93.136.202:0]ModSecur ...
show more
[SunJun1423:06:51.6416632026][security2:error][pid2397636:tid2397656][client34.93.136.202:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.kvsm-blackstone.com.136-243-54-122.cpanel.site\"][uri\"/v2/.git/config\"][unique_id\"ai8X61JCBUvnhLQgbZXP8gAAAAk\"]
show less
Port Scan
Brute-Force
Web App Attack