🇺🇸
TPI-Abuse
2026-09-29 22:37:35
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:37:30.370338 2026] [security2:error] [pid 16393:tid 16393] [client 34.148.195.89:60998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "newlifeaccommodation.org"] [uri "/.git/config"] [unique_id "arw9qluoxBsvRmlUZR0lDgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 12:52:58
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:52:54.268016 2026] [security2:error] [pid 4699:tid 4699] [client 34.148.195.89:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pixacast.com"] [uri "/.git/config"] [unique_id "aru0plpvZIkKl2YviLESygAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:56:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:56:47.421152 2026] [security2:error] [pid 29579:tid 29579] [client 34.148.195.89:60382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.microscopedia.com"] [uri "/.git/config"] [unique_id "arsMz2psyWBApXvoPjl0fwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-29 00:40:33
(2 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-28 05:15:28
(3 days ago)
Multiple WAF Violations
Web App Attack
🇮🇳
dineshskt4all
2026-09-28 04:42:30
(3 days ago)
[Mon Sep 28 04:42:28.464073 2026] [proxy_fcgi:error] [pid 3859207:tid 125217624028864] [client 34.14 ...
show more
[Mon Sep 28 04:42:28.464073 2026] [proxy_fcgi:error] [pid 3859207:tid 125217624028864] [client 34.148.195.89:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-23 21:59:51
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
show less
Web App Attack
SSH
Hacking
🇧🇪
taivas.nl
2026-09-23 04:33:14
(1 week ago)
Many_bad_calls
Web App Attack
🇧🇪
taivas.nl
2026-09-22 08:32:15
(1 week ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-21 19:19:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:19:14.043696 2026] [security2:error] [pid 28858:tid 28858] [client 34.148.195.89:58056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photokarine.com"] [uri "/.git/config"] [unique_id "arGDMpw1pEOqJnbH65_eXAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-21 19:05:04
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 17:16:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 13:16:21.442506 2026] [security2:error] [pid 6976:tid 7107] [client 34.148.195.89:51178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photo.gallery.the-aquifer.com"] [uri "/.git/config"] [unique_id "arFmZcqOZL-5Ay32M9ZICQAAApE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 16:01:00
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 12:00:55.792020 2026] [security2:error] [pid 7085:tid 7085] [client 34.148.195.89:43254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photo-craft.org"] [uri "/.git/config"] [unique_id "arFUt_aUC8sMhtfgeSscZgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 15:13:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.195.89 (89.195.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:13:37.140684 2026] [security2:error] [pid 12337:tid 12337] [client 34.148.195.89:50060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "photoboutiqueamerica.com"] [uri "/.git/config"] [unique_id "arFJoUBFKaNZ7Yw9I-ju9wAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-21 14:44:59
(1 week ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config | 2026-09-21 14:44 UTC
show less
Hacking
Web App Attack
