๐ฉ๐ช
BlueWire Hosting
2026-09-01 22:04:20
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 20:20:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:20:41.045631 2026] [security2:error] [pid 26331:tid 26331] [client 34.74.27.80:46052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "savannah-house.com"] [uri "/.git/config"] [unique_id "apczmeCAoq9AncCFMfxU8gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:08:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:08:17.498068 2026] [security2:error] [pid 26129:tid 26129] [client 34.74.27.80:3278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hdestimating.com"] [uri "/.git/config"] [unique_id "apaWAWXUniR6rL_BrqEg2QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 08:00:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:00:29.767044 2026] [security2:error] [pid 20082:tid 20163] [client 34.74.27.80:38382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiehnefamily.us"] [uri "/.git/config"] [unique_id "apaGHUzo3XFLOK5zIgByfgAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 07:40:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:40:14.494716 2026] [security2:error] [pid 2548:tid 2548] [client 34.74.27.80:53908] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jbowerslaw.com"] [uri "/.git/config"] [unique_id "apaBXnHF9y--HxcwZrYCKAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-01 05:27:17
(1 day ago)
[dev.backorder.gr] httpd-config-scan: sites=global; logs=/var/log/nginx/access.log; samples=/.git/co ...
show more
[dev.backorder.gr] httpd-config-scan: sites=global; logs=/var/log/nginx/access.log; samples=/.git/config
show less
Hacking
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-01 03:42:13
(1 day ago)
34.74.27.80 - - [01/Sep/2026:05:42:12 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (W ...
show more
34.74.27.80 - - [01/Sep/2026:05:42:12 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 02:46:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:46:36.659932 2026] [security2:error] [pid 14548:tid 14548] [client 34.74.27.80:46162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "arogun.org"] [uri "/.git/config"] [unique_id "apY8jJcvMiDBDdc_AsACpQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 01:40:54
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 21:40:46.811932 2026] [security2:error] [pid 28811:tid 28811] [client 34.74.27.80:2128] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "789bid.net"] [uri "/.git/config"] [unique_id "apYtHpKCWhmwWPVCiKnPaQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
iNetWorker
2026-09-01 00:31:26
(2 days ago)
trolling for resource vulnerabilities
Web App Attack
๐บ๐ธ
mnsf
2026-08-31 19:05:19
(2 days ago)
Abuse Detected (19)
Brute-Force
Web App Attack
๐ฉ๐ช
HERA - Operations
2026-08-31 16:04:28
(2 days ago)
scelly - searching for vulnerable scripts: config 2026/08/31 16:04:28
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 15:33:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:33:50.222042 2026] [security2:error] [pid 28171:tid 28171] [client 34.74.27.80:4370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rharano.org"] [uri "/.git/config"] [unique_id "apWe3tqVM7lX79FhiJNxAgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-31 12:30:37
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.27.80 (80.27.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:30:33.132713 2026] [security2:error] [pid 28834:tid 28834] [client 34.74.27.80:62260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "miroddi.com"] [uri "/.git/config"] [unique_id "apVz6Zca-ThpVFeGZ9gHogAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-08-31 11:25:32
(2 days ago)
High-confidence malicious configuration/VCS probe
Web App Attack