🇮🇳
evicky2002
2026-11-08 20:01:48
UTC ·
(6 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-05 02:10:10
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 22:10:04.833928 2026] [security2:error] [pid 32603:tid 32 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 22:10:04.833928 2026] [security2:error] [pid 32603:tid 32608] [client 34.12.77.129:42966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lordennerdale.com"] [uri "/public/.git/config"] [unique_id "apt5_PfSt-XTS1MZvMkU_gAAAQM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
tutaim.com
2026-09-04 22:00:05
UTC ·
(2 months ago)
⛔ [05/09/26] This IP has been detected performing multiple attacks on websites (36 attempts blocked). Potential malicious activity.
Brute-Force
SSH
Web App Attack
FTP Brute-Force
Anonymous
2026-09-04 21:10:42
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
big-cloud.nl
2026-09-04 20:35:44
UTC ·
(2 months ago)
Try to access /backend/.git/config
Web App Attack
🇨🇭
4server
2026-09-04 20:33:59
UTC ·
(2 months ago)
[FriSep0422:33:56.8985932026][security2:error][pid2149521:tid2149763][client34.12.77.129:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720 ...
show more
[FriSep0422:33:56.8985932026][security2:error][pid2149521:tid2149763][client34.12.77.129:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"dolltherapy.ch.81-17-25-250.cpanel.site\"][uri\"/app/.git/config\"][unique_id\"apsrNCtM_NZlSPdYHqZx6gAAARQ\"]
show less
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-04 18:39:45
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇪🇸
tutaim.com
2026-09-04 15:00:04
UTC ·
(2 months ago)
⛔ [04/09/26] This IP has been detected performing multiple attacks on websites (36 attempts blocked). Potential malicious activity.
Brute-Force
SSH
Web App Attack
FTP Brute-Force
🇫🇷
Baking333
2026-09-04 07:52:50
UTC ·
(2 months ago)
[redacted] 34.12.77.129 - - [04/Sep/2026:08:52:49 +0100] "GET /var/www/.git/config HTTP/1.1" 302 6763 0/42655 "-" "crusader-worker/1.0" [redacted] 34.12.77.129 - - [04/Sep/2026:08:52:49 +0100] "GET /wordpress/.git/config HTTP/1.1" 302 6763 0/37410 "- ...
show more
[redacted] 34.12.77.129 - - [04/Sep/2026:08:52:49 +0100] "GET /var/www/.git/config HTTP/1.1" 302 6763 0/42655 "-" "crusader-worker/1.0" [redacted] 34.12.77.129 - - [04/Sep/2026:08:52:49 +0100] "GET /wordpress/.git/config HTTP/1.1" 302 6763 0/37410 "-" "crusader-worker/1.0" [redacted] 34.12.77.129 - - [04/Sep/2026:08:52:49 +0100] "GET /src/.git/config HTTP/1.1" 302 6763 0/35669 "-" "crusader-worker/1.0"
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-04 06:22:57
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 04:54:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:54:18.576267 2026] [security2:error] [pid 6648:tid 664 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:54:18.576267 2026] [security2:error] [pid 6648:tid 6648] [client 34.12.77.129:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.c2cservices.com"] [uri "/src/.git/config"] [unique_id "appO-pzIyNHRAqNV9UzHsQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-04 01:54:55
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 00:47:06
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:46:59.880909 2026] [security2:error] [pid 4829:tid 482 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.12.77.129 (129.77.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 20:46:59.880909 2026] [security2:error] [pid 4829:tid 4829] [client 34.12.77.129:39448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "flybits.org"] [uri "/backend/.git/config"] [unique_id "apoVA2V-v0FMfwSfPxryagAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-03 23:57:10
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
SCHAPPY
2026-09-03 23:49:56
UTC ·
(2 months ago)
Probing for non-installed web apps or current vulnerabilities.
Hacking
Web App Attack