๐ท๐ด
INTEQ
2024-03-28 09:40:14
(2 years ago)
Web attack from 91.229.76.43
Web App Attack
๐ธ๐ช
mr_whitehat
2024-03-27 00:36:25
(2 years ago)
Probed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open gi ...
show more
Probed for vulnerable web application: request line: /.git/config (Possible exploit:Scan for open git repositories)
show less
Web App Attack
๐ฉ๐ช
Bedios GmbH
2024-03-26 03:14:46
(2 years ago)
Login credentials theft attempt
Hacking
๐บ๐ธ
mawan
2024-03-26 03:11:55
(2 years ago)
Suspected of having performed illicit activity on LAX server.
Web App Attack
๐ฉ๐ช
ghostwarriors
2024-03-25 17:50:04
(2 years ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 16:27:41
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 12:27:38.566065 2024] [security2:error] [pid 1313559] [client 91.229.76.43:50162] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zmgmt.net"] [uri "/.git/config"] [unique_id "ZgGl-ti21bHCIfi1NhYqKQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
ISPLtd
2024-03-25 14:13:16
(2 years ago)
91.229.76.43 - - [25/Mar/2024:11:13:13 -0300] "GET /.git/config
...
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 13:42:34
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 09:42:31.029553 2024] [security2:error] [pid 7062] [client 91.229.76.43:28781] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmashburn.com"] [uri "/.git/config"] [unique_id "ZgF_R4x9NT6DCNtrZNcjNwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 13:05:06
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 09:04:58.931253 2024] [security2:error] [pid 3758] [client 91.229.76.43:50183] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "interpuntos.com"] [uri "/.git/config"] [unique_id "ZgF2esxJg-DPICMtRHxKzQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2024-03-25 13:02:27
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (UA/Ukraine/91.229.76.43.deltahost ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (UA/Ukraine/91.229.76.43.deltahost-ptr): N in the last X secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 12:44:32
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 08:44:27.033959 2024] [security2:error] [pid 30156] [client 91.229.76.43:5276] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ficklepassion.com"] [uri "/.git/config"] [unique_id "ZgFxq-nIbAFS_zOR2MSDQQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 12:07:44
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 08:07:36.507879 2024] [security2:error] [pid 2781] [client 91.229.76.43:22372] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hestafil.com"] [uri "/.git/config"] [unique_id "ZgFpCEDAGWz2I5Jt4sDj5wAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Shadymint
2024-03-25 12:05:46
(2 years ago)
url probing from IP marked as abusive
Web App Attack
๐ณ๐ฑ
vestibtech
2024-03-25 11:53:31
(2 years ago)
91.229.76.43 - - [25/Mar/2024:05:53:30 -0600] "GET /.git/config HTTP/1.1" 301 465 "-" "Mozilla/5.0 ( ...
show more
91.229.76.43 - - [25/Mar/2024:05:53:30 -0600] "GET /.git/config HTTP/1.1" 301 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.63 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2024-03-25 11:46:31
(2 years ago)
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in ...
show more
(mod_security) mod_security (id:210492) triggered by 91.229.76.43 (91.229.76.43.deltahost-ptr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Mar 25 07:46:26.505718 2024] [security2:error] [pid 10570] [client 91.229.76.43:9025] [client 91.229.76.43] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kingscruff.com"] [uri "/.git/config"] [unique_id "ZgFkEtVkCG9dwfun16co_wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack