๐ฟ๐ฆ
conure.sh
2026-10-20 20:15:58
(5 hours ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 2 domain(s) in 8s
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-20 16:37:40
(8 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐จ๐ญ
zynex
2026-10-20 15:36:29
(9 hours ago)
URL Probing: /.env
Web App Attack
Anonymous
2026-10-20 15:30:03
(9 hours ago)
suspicious request in access.log
Web App Attack
๐ฟ๐ฆ
conure.sh
2026-10-20 12:49:43
(12 hours ago)
csagent: score 20.4: secrets grab x2, 404 noise floor x2; 1 domain(s) in 6s
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 12:22:49
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:22:40.920398 2026] [security2:error] [pid 12921:tid 12921] [client 35.234.84.146:46622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.statistician.cmabiblequizzing.org"] [uri "/.git/config"] [unique_id "atddEHhZ_XRncjbpVAYdPgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-20 12:19:21
(13 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.234.84.146 (DE/Germany/146.84.234.35.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 35.234.84.146 (DE/Germany/146.84.234.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-20 11:34:25
(13 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\ ...
show more
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-131)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-20 10:54:06
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 06:54:01.696708 2026] [security2:error] [pid 15927:tid 15927] [client 35.234.84.146:34806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.statevictoryfund.progressivefileshare.org"] [uri "/.git/config"] [unique_id "atdISc3liC8FpWWM4PAP1wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-10-20 10:39:22
(14 hours ago)
CMS/framework probe: 35.234.84.146 - - [20/Oct/2026:12:39:22 +0200] "GET /.git/config HTTP/1.1" 301 ...
show more
CMS/framework probe: 35.234.84.146 - - [20/Oct/2026:12:39:22 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=DE
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:51:48
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:51:42.056395 2026] [security2:error] [pid 18018:tid 18025] [client 35.234.84.146:33550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.stat.ramona.town"] [uri "/.git/config"] [unique_id "atc5rnoXGgEV0jSFan77LgAAAQQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-10-20 09:43:27
(15 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฌ๐ง
consul.to
2026-10-20 09:28:42
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 09:03:18
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.234.84.146 (146.84.234.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 05:03:13.700907 2026] [security2:error] [pid 31936:tid 31949] [client 35.234.84.146:51460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.starwars.onernet.com"] [uri "/.git/config"] [unique_id "atcuUY3rFW7rqzPOiYHHeAAAAIs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 08:49:40
(16 hours ago)
Multiple WAF Violations
Web App Attack