๐ฌ๐ง
consul.to
2026-06-15 04:58:42
(1 hour ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
4server
2026-06-15 04:56:45
(1 hour ago)
[MonJun1506:56:40.8627452026][security2:error][pid3650296:tid3650315][client35.244.7.152:0]ModSecuri ...
show more
[MonJun1506:56:40.8627452026][security2:error][pid3650296:tid3650315][client35.244.7.152:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"dellafoglia.ch\"][uri\"/build/.git/config\"][unique_id\"ai-GCIZ-XF-x1qSNvze4NgAAAJA\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 04:56:31
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:56:27.252607 2026] [security2:error] [pid 18858:tid 18875] [client 35.244.7.152:48838] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "campingcosmetics.com"] [uri "/v3/.git/config"] [unique_id "ai-F-5l3h-dXPfZ8QNG2DwAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 02:53:33
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:53:30.429979 2026] [security2:error] [pid 18762:tid 18762] [client 35.244.7.152:60662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paulzaremba.com.growtowork.com"] [uri "/v3/.git/config"] [unique_id "ai9pKlKYbbugWEdPjON3lwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 01:49:35
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:49:29.458037 2026] [security2:error] [pid 14807:tid 14807] [client 35.244.7.152:58006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.itimetable21.com"] [uri "/v1/.git/config"] [unique_id "ai9aKYJvYIB5qsK5QWzO2gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 00:38:08
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:38:01.232794 2026] [security2:error] [pid 4383:tid 4391] [client 35.244.7.152:42310] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.neutrahouse1939.ward-bergerhouse.org"] [uri "/app/.git/config"] [unique_id "ai9Jaau_4WOgG5kFmKeRHwAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-15 00:08:30
(6 hours ago)
Abuse Detected (29)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 22:51:43
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:51:36.890084 2026] [security2:error] [pid 10171:tid 10171] [client 35.244.7.152:46074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shukrisharawico.com"] [uri "/src/.git/config"] [unique_id "ai8weOVUz7oopf5gSB51CwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-14 22:48:37
(8 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
cwytech
2026-06-14 22:31:18
(8 hours ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: crowdsecurity/http-sensitive-files.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-14 21:59:16
(8 hours ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-14 21:42:43
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.244.7.152 (152.7.244.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:42:37.893422 2026] [security2:error] [pid 14043:tid 14043] [client 35.244.7.152:59196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coloradohifi.com"] [uri "/laravel/.git/config"] [unique_id "ai8gTVxBXfa_Fpz7B7xQpwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-14 21:31:08
(9 hours ago)
[SunJun1423:31:04.5490442026][security2:error][pid4046629:tid4046814][client35.244.7.152:0]ModSecuri ...
show more
[SunJun1423:31:04.5490442026][security2:error][pid4046629:tid4046814][client35.244.7.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.fondazionemontgrand.ch.81-17-25-250.cpanel.site\"][uri\"/backend/.git/config\"][unique_id\"ai8dmLfTIiAP_fhArX4ThgAAAQw\"]
show less
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-14 16:21:41
(14 hours ago)
20 attempts against mh-misbehave-ban on chard
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
lnklnx
2026-06-14 15:43:47
(15 hours ago)
www.lnklnx.com:443 35.244.7.152 - - [14/Jun/2026:10:43:44 -0500] "GET /.git/config HTTP/1.1" 403 381 ...
show more
www.lnklnx.com:443 35.244.7.152 - - [14/Jun/2026:10:43:44 -0500] "GET /.git/config HTTP/1.1" 403 3818 "-" "Mozilla/5.0 (Linux; Android 9; Nokia 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
show less
Web App Attack