🇺🇸
TPI-Abuse
2026-06-09 13:59:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:59:44.692351 2026] [security2:error] [pid 28979:tid 28979] [client 34.126.183.172:33258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jcrluthier.com"] [uri "/.git/config"] [unique_id "aigcUID983Z2w4c9Hv-2RwAAAGY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:16:43
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:16:38.307490 2026] [security2:error] [pid 11395:tid 11395] [client 34.126.183.172:47328] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.pleasejustfixit.org.cescfoundation.org"] [uri "/.git/config"] [unique_id "aigEJgfzGAUxwrluHxr4DwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 12:09:05
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 11:58:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:58:11.963220 2026] [security2:error] [pid 7653:tid 7653] [client 34.126.183.172:47552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "delicioushotspots.com"] [uri "/.git/config"] [unique_id "aif_019ubvpaBjxi8kSKZwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:28:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:28:47.833519 2026] [security2:error] [pid 30291:tid 30291] [client 34.126.183.172:53514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "charlesrader.com"] [uri "/.git/config"] [unique_id "aifq3w4BDiUKQIqa2tVCNQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:07:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:07:31.945332 2026] [security2:error] [pid 1315:tid 1315] [client 34.126.183.172:40268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "301i.com"] [uri "/.git/config"] [unique_id "aifl46346cfpXGI5E47s5QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:51:21
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:51:17.022147 2026] [security2:error] [pid 25507:tid 25507] [client 34.126.183.172:48922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "desktop.joebankx.com"] [uri "/.git/config"] [unique_id "aifiFWKM67EWp9u1fnAK6QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 09:06:12
(1 day ago)
Trying to access config files
Web App Attack
🇮🇹
Inartis
2026-06-09 08:21:49
(1 day ago)
34.126.183.172 - - [09/Jun/2026:08:21:49 +0000] "GET /.git/config HTTP/1.1" 404 5147 "-" "Mozilla/5. ...
show more
34.126.183.172 - - [09/Jun/2026:08:21:49 +0000] "GET /.git/config HTTP/1.1" 404 5147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_3) AppleWebKit/537.75.14 (KHTML, like Gecko) Version/7.0.3 Safari/7046A194A"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-09 07:05:29
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 06:27:04
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:27:00.722066 2026] [security2:error] [pid 25878:tid 25878] [client 34.126.183.172:37410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gabosoftware.com"] [uri "/.git/config"] [unique_id "aieyNKd4A7on6tbpZwF8JQAAAGk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 06:25:01
(1 day ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:54:17
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:54:12.333692 2026] [security2:error] [pid 737:tid 737] [client 34.126.183.172:46710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "radicalchange.org"] [uri "/.git/config"] [unique_id "aieqhDckIeuugVSq2rfrIwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:28:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:28:37.595428 2026] [security2:error] [pid 19157:tid 19157] [client 34.126.183.172:55138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "theinjuredparties.com"] [uri "/.git/config"] [unique_id "aiekhciMCyMa14JcUfDLhgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 05:11:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.183.172 (172.183.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:11:20.677917 2026] [security2:error] [pid 3821:tid 3821] [client 34.126.183.172:44672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "springfieldtileexpert.com"] [uri "/.git/config"] [unique_id "aiegeECkjJ9fJ_Q5I6tEogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack