|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇩🇪
LRob
|
|
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-09-16 03:56 UTC
|
Hacking
Web App Attack
|
|
🇩🇪
macrob
|
|
2026/09/16 02:53:05 [error] 2698478#2698478: *3147918 access forbidden by rule, client: 34.75.79.89, server: 100fs.org, request: "GET /.git/config HTTP/1.1", host: "100fs.org"
2026/09/16 02:53:05 [error] 2698478#2698478: *3147926 access forbidden by ...
show more
2026/09/16 02:53:05 [error] 2698478#2698478: *3147918 access forbidden by rule, client: 34.75.79.89, server: 100fs.org, request: "GET /.git/config HTTP/1.1", host: "100fs.org"
2026/09/16 02:53:05 [error] 2698478#2698478: *3147926 access forbidden by rule, client: 34.75.79.89, server: 100fs.org, request: "GET /.env HTTP/1.1", host: "100fs.org"
2026/09/16 02:53:06 [error] 2698478#2698478: *3147927 access forbidden by rule, client: 34.75.79.89, server: 100fs.org, request: "GET /.env.local HTTP/1.1", host: "100fs.org"
...
show less
|
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:57:22.126171 2026] [security2:error] [pid 6669:tid 6669] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:57:22.126171 2026] [security2:error] [pid 6669:tid 6669] [client 34.75.79.89:51456] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bernardtardy.com"] [uri "/.git/config"] [unique_id "aqm_QmfyRSH4Ec1i3HN8FgAAAB8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:22:07.627790 2026] [security2:error] [pid 9416:tid 9416] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:22:07.627790 2026] [security2:error] [pid 9416:tid 9416] [client 34.75.79.89:36674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.scaleiq.group.smartstylehair.com"] [uri "/.git/config"] [unique_id "aqmo7-z3tw9gYLPfo-nixAAAAA0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇩🇪
konseptit
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.75.79.89 (US/United States/89.79.75.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:28:14.968669 2026] [security2:error] [pid 31336:tid 3133 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 06:28:14.968669 2026] [security2:error] [pid 31336:tid 31336] [client 34.75.79.89:36666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vgalleria.com"] [uri "/.git/config"] [unique_id "aqkdvg3eZCBDsk9vy4PX6gAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
pipeline.es
|
|
Web scanning / probing for vulnerable paths | URL: /.env.dev | Evidence: vgalapagos.com 34.75.79.89 - - [15/Sep/2026:12:27:13 +0200] \"GET /.env.dev HTTP/1.1\" 404 4434 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.dev | Evidence: vgalapagos.com 34.75.79.89 - - [15/Sep/2026:12:27:13 +0200] \"GET /.env.dev HTTP/1.1\" 404 4434 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=US | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
|
Port Scan
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:56:32.664798 2026] [security2:error] [pid 15607:tid 1560 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.79.89 (89.79.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 02:56:32.664798 2026] [security2:error] [pid 15607:tid 15607] [client 34.75.79.89:48340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vffv.com"] [uri "/.git/config"] [unique_id "aqjsILdbJQe6hALQjTFB7wAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
paissangroup
|
|
Multiple WAF Violations
|
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
