Anonymous
2026-06-15 05:13:12
UTC ·
(5 months ago)
Bot / seems abusive / Apache connections: 39
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 04:54:40
UTC ·
(5 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-06-15 04:33:48
UTC ·
(5 months ago)
Try to access /.git/config
Web App Attack
🇧🇪
taivas.nl
2026-06-15 04:33:10
UTC ·
(5 months ago)
Many_bad_calls
Web App Attack
🇩🇪
itsolon
2026-06-15 04:18:36
UTC ·
(5 months ago)
[15/Jun/2026:06:18:36 +0200] 178149711618.772948 34.130.40.124 34456 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711665.467167 34.130.40.124 34454 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711647.704283 34.130.40.124 34460 217.154 ...
show more
[15/Jun/2026:06:18:36 +0200] 178149711618.772948 34.130.40.124 34456 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711665.467167 34.130.40.124 34454 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711647.704283 34.130.40.124 34460 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711667.691890 34.130.40.124 34464 217.154.7.177 443
[15/Jun/2026:06:18:36 +0200] 178149711655.577353 34.130.40.124 34470 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:24:11
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:24:04.084384 2026] [security2:error] [pid 30746:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:24:04.084384 2026] [security2:error] [pid 30746:tid 30746] [client 34.130.40.124:49974] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ericmedley.tremulant.com"] [uri "/.git/config"] [unique_id "ai9wVJXMl2IB-SMEMF_MmgAAAFU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 01:24:48
UTC ·
(5 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇭🇺
bcsaba
2026-06-15 01:10:31
UTC ·
(5 months ago)
Multiple web server 400 error codes from same source ip.
34.130.40.124 - - [15/Jun/2026:03:10:26 +0200] "GET /project/.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 ...
show more
Multiple web server 400 error codes from same source ip.
34.130.40.124 - - [15/Jun/2026:03:10:26 +0200] "GET /project/.git/config HTTP/1.1" 400 632 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 UBrowser/5.6.13705.206 Safari/537.36"
show less
Web App Attack
Brute-Force
🇺🇸
TPI-Abuse
2026-06-15 01:08:55
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:08:50.640523 2026] [security2:error] [pid 18649:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:08:50.640523 2026] [security2:error] [pid 18649:tid 18649] [client 34.130.40.124:33070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.alrightletsgo.com"] [uri "/.git/config"] [unique_id "ai9QoigrNd0mHK0vObjVjwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-06-15 00:02:31
UTC ·
(5 months ago)
http-sensitive-files - IP: 34.130.40.124 - time="2026-06-15T02:02:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.130.40.124 (CA/396982) : 4h ban on Ip 34.130.40.124" ...
show more
http-sensitive-files - IP: 34.130.40.124 - time="2026-06-15T02:02:29+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.130.40.124 (CA/396982) : 4h ban on Ip 34.130.40.124" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:01:01
UTC ·
(5 months ago)
(mod_security) mod_security (id:949110) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:00:56.579915 2026] [security2:error] [pid 18369:tid ...
show more
(mod_security) mod_security (id:949110) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:00:56.579915 2026] [security2:error] [pid 18369:tid 18369] [client 34.130.40.124:56374] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "alexcorp.click"] [uri "/v2/.git/config"] [unique_id "ai9AuDn1b4LPBjtTIWIQ4gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:09:24
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:09:18.825555 2026] [security2:error] [pid 9369:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.40.124 (124.40.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:09:18.825555 2026] [security2:error] [pid 9369:tid 9369] [client 34.130.40.124:59300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "computersraleigh.com"] [uri "/.git/config"] [unique_id "ai80nl6hYv2yYtFQ-1rcjwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-14 22:47:40
UTC ·
(5 months ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇱
e.fierstra
2026-06-14 22:35:55
UTC ·
(5 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-06-14 22:32:10
UTC ·
(5 months ago)
Bad_requests
Bad Web Bot