🇳🇱
MyGlobalFlowers
2026-09-03 23:22:55
(11 minutes ago)
Multiple WAF Violations
Web App Attack
🇦🇺
2000cn.com.au
2026-09-03 23:18:45
(15 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-03 23:16:09
(18 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 19:16:05.618735 2026] [security2:error] [pid 15366:tid 15366] [client 35.240.129.34:40130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celebritybikinigossip.com"] [uri "/.git/config"] [unique_id "apn_tdEm_-sgWmMYjroLrgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇹
NotACaptcha
2026-09-03 22:58:32
(35 minutes ago)
webserver:443 [04/Sep/2026] "GET /.git/config HTTP/1.1" 403 5692
Web App Attack
🇺🇸
CBJ
2026-09-03 22:33:49
(1 hour ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇦🇺
A.i.D.A.N.N
2026-09-03 22:16:25
(1 hour ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 22:09:23
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 18:09:17.022743 2026] [security2:error] [pid 2983:tid 2983] [client 35.240.129.34:44416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "36sovereignchambers.com"] [uri "/.git/config"] [unique_id "apnwDatnSVvIyruge26KtQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-03 22:01:20
(1 hour ago)
Auto-ban: >3000 req/min op 2026-09-03
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-03 21:49:51
(1 hour ago)
(mod_security) mod_security (id:949110) triggered by 35.240.129.34 (34.129.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 35.240.129.34 (34.129.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 17:49:44.789361 2026] [security2:error] [pid 25076:tid 25076] [client 35.240.129.34:53884] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.cescfoundation.org"] [uri "/.git/config"] [unique_id "apnreFikiPDV0NXZZzTUfgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ambor
2026-09-03 21:11:45
(2 hours ago)
Honeypot triggered on tcpdata.com - Attempted to access /.git/config (git_probe). User-Agent: Unknow ...
show more
Honeypot triggered on tcpdata.com - Attempted to access /.git/config (git_probe). User-Agent: Unknown
show less
Web App Attack
🇳🇱
enpepet
2026-09-03 21:06:30
(2 hours ago)
GENERAL: parametres: [url:git=] UA: URL:/.git/config
Port Scan
Hacking
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-03 20:32:35
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 16:32:28.150402 2026] [security2:error] [pid 32565:tid 32565] [client 35.240.129.34:48700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "spiht.com"] [uri "/.git/config"] [unique_id "apnZXKwt0FJxMWr5SsYT4wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 20:26:34
(3 hours ago)
apache vulnerability scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 19:59:07
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.129.34 (34.129.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 15:59:03.596263 2026] [security2:error] [pid 6138:tid 6138] [client 35.240.129.34:43522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.criarteste.com"] [uri "/.git/config"] [unique_id "apnRh_RX-DQ6e6blxr9KLgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 19:39:39
(3 hours ago)
Web application attack detected.
Web App Attack