๐ฟ๐ฆ
conure.sh
2026-08-28 12:14:23
(17 hours ago)
csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 18:27:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:27:46.050054 2026] [security2:error] [pid 11379:tid 11379] [client 35.198.118.174:44536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jockoenterprises.com"] [uri "/var/www/.git/config"] [unique_id "apCBotGIe5c7OUKP_tYodgAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 14:40:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:39:59.333591 2026] [security2:error] [pid 20702:tid 20702] [client 35.198.118.174:33490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandpointidaho.com"] [uri "/app/.git/config"] [unique_id "apBMP70_XSnQgkrobuq_2gAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-08-27 12:33:04
(1 day ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 12:33:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:32:54.891695 2026] [security2:error] [pid 22833:tid 22833] [client 35.198.118.174:35582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.luisguacache.com"] [uri "/.git/config"] [unique_id "apAudhoyFRuvx8XcJRG24QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-27 11:58:17
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ฉ๐ช
gadix
2026-08-27 07:40:10
(1 day ago)
[27/Aug/2026:09:40:10.084017 +0200] ao_p2tx9ajkieOUAaEloBQAAAAU 35.198.118.174 41408 127.0.0.1 7081
...
show more
[27/Aug/2026:09:40:10.084017 +0200] ao_p2tx9ajkieOUAaEloBQAAAAU 35.198.118.174 41408 127.0.0.1 7081
[27/Aug/2026:09:40:10.088171 +0200] ao_p2nLQkWMy7o3ypIDWKwAAAEY 35.198.118.174 41418 127.0.0.1 7081
[27/Aug/2026:09:40:10.089207 +0200] ao_p2tx9ajkieOUAaEloBgAAABA 35.198.118.174 41420 127.0.0.1 7081
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 05:22:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 01:22:37.457037 2026] [security2:error] [pid 7351:tid 7360] [client 35.198.118.174:50480] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.quetzalcoatl2012.wizart.org"] [uri "/src/.git/config"] [unique_id "ao_JnYRZAC8ctzL2WgnppAAAAUY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 04:05:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 00:05:42.098906 2026] [security2:error] [pid 26478:tid 26478] [client 35.198.118.174:51022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.3905ccn.org"] [uri "/app/.git/config"] [unique_id "ao-3llRXwgv4tuPEXYlixgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-08-27 03:05:09
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 02:47:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.198.118.174 (174.118.198.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 22:47:45.191401 2026] [security2:error] [pid 1054:tid 1054] [client 35.198.118.174:49714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nvafc.com"] [uri "/api/.git/config"] [unique_id "ao-lUeLmaacGTkrgPfVN4wAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-08-26 22:05:29
(2 days ago)
Too many Status 40X (12)
Scanning/Probing (24)
Brute-Force
Web App Attack