🇺🇸
factor1
2026-09-06 07:37:09
UTC ·
(2 months ago)
CrowdSec at apollo Reports Abuse
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:01:53
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:01:45.711557 2026] [security2:error] [pid 1390:tid 1390] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:01:45.711557 2026] [security2:error] [pid 1390:tid 1390] [client 34.7.160.98:49734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.advantstudio.com"] [uri "/api/.git/config"] [unique_id "apzJiX_DjZM-eBGAFj8DJAAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:39:44
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:39:37.923686 2026] [security2:error] [pid 25287:tid 2528 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:39:37.923686 2026] [security2:error] [pid 25287:tid 25287] [client 34.7.160.98:58406] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "farjam.com"] [uri "/src/.git/config"] [unique_id "apzEWUfJUkTAL5yTXLxIaQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-06 00:36:20
UTC ·
(2 months ago)
204 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-05 22:12:33
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:12:29.335999 2026] [security2:error] [pid 26403:tid 2640 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:12:29.335999 2026] [security2:error] [pid 26403:tid 26403] [client 34.7.160.98:59218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.carterslawncare.net"] [uri "/backend/.git/config"] [unique_id "apyTzUhgFNSwECLVgQ7jYQAAAEE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-05 22:01:08
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-04.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-05 21:49:08
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:49:00.828551 2026] [security2:error] [pid 24191:tid 2419 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 17:49:00.828551 2026] [security2:error] [pid 24191:tid 24191] [client 34.7.160.98:53500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.oneselect.com.hk"] [uri "/.git/config"] [unique_id "apyOTP6Kc-Bk1GMrxIR3qgAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-05 21:22:28
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 21:12:02
UTC ·
(2 months ago)
Bot / scanning and/or hacking attempts: GET /wordpress/.git/config HTTP/1.1, GET /.git/config HTTP/1.1, GET /htdocs/.git/config HTTP/1.1, GET /public/.git/config HTTP/1.1
Hacking
Web App Attack
🇫🇷
dynamix
2026-09-05 21:09:09
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
IVski.com
2026-09-04 23:02:04
UTC ·
(2 months ago)
IVski WAF | Sensitive file probe - looking for exposed .git/config
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 23:00:11
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 19:00:04.698896 2026] [security2:error] [pid 3949:tid 3949] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.160.98 (98.160.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 19:00:04.698896 2026] [security2:error] [pid 3949:tid 3949] [client 34.7.160.98:47056] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "register-yacht-uk.com"] [uri "/site/.git/config"] [unique_id "aptNdHZrVqCucQTP2fHh8gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-04 21:57:55
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
LRob
2026-09-04 21:28:41
UTC ·
(2 months ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /public/.git/config (+11 more) | 2026-09-04 21:28 UTC
Hacking
Web App Attack
🇩🇪
Séfora Srl
2026-09-04 20:26:00
UTC ·
(2 months ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack