🇺🇸
TPI-Abuse
2026-09-01 10:18:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:18:05.982260 2026] [security2:error] [pid 1371:tid 1371] [client 34.7.125.133:55426] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ps-omega.com"] [uri "/backend/.git/config"] [unique_id "apamXYk4hZ69ZwmYqu0w-wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-01 09:56:29
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:56:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:55:53.200659 2026] [security2:error] [pid 22575:tid 22575] [client 34.7.125.133:37656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.l39capital.com"] [uri "/public/.git/config"] [unique_id "apahKbWd_7VyJECSSjU1NAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:36:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:36:44.957285 2026] [security2:error] [pid 28976:tid 28976] [client 34.7.125.133:49958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thedoodlists.com"] [uri "/api/.git/config"] [unique_id "apacrDqGYpUV0FbFX1bjWQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-01 05:11:37
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-01 05:10:14
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-01 03:50:51
(1 day ago)
Scan for .git Files at 2026-09-01T03:50:51+00:00
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 03:41:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.125.133 (133.125.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 23:41:01.176993 2026] [security2:error] [pid 25787:tid 25787] [client 34.7.125.133:55722] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mauriciagandara.com"] [uri "/backend/.git/config"] [unique_id "apZJTewn7fWHKcVQJ0jezAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-01 02:23:47
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 24 hits.
show less
Web App Attack