π©πͺ
todix
2026-10-20 19:42:09
(1 hour ago)
"GET /.git/config HTTP/1.1" 403 6574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
"GET /.git/config HTTP/1.1" 403 6574 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 18:01:22
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:01:18.115890 2026] [security2:error] [pid 3489:tid 3489] [client 34.77.231.134:41366] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "trclegacyholdings.org.ryanc.net"] [uri "/.git/config"] [unique_id "atesboCv5L8tYXFMODkpzAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
pipeline.es
2026-10-20 15:23:03
(5 hours ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
π©πͺ
todix
2026-10-20 12:36:12
(8 hours ago)
"GET /.git/config HTTP/1.1" 403 6574 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
"GET /.git/config HTTP/1.1" 403 6574 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 12:20:54
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:20:48.846380 2026] [security2:error] [pid 17862:tid 17862] [client 34.77.231.134:58952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelwithjenniferb.com"] [uri "/.git/config"] [unique_id "atdcoKIyg5MSs5Rr8eqVOgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 12:00:51
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:00:45.083654 2026] [security2:error] [pid 21957:tid 21967] [client 34.77.231.134:35992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelusa.us"] [uri "/.git/config"] [unique_id "atdX7T1UENBo0wNa_CiXOAAAAEg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
Danguole Rasalaite Memorial π±πΉ
2026-10-20 11:47:33
(9 hours ago)
[SOC-ALERT: VULN-SCANNER] Automated reconnaissance probe intercepted by Nginx web application filter ...
show more
[SOC-ALERT: VULN-SCANNER] Automated reconnaissance probe intercepted by Nginx web application filter. Vector: Targeted probing for sensitive or hidden resources (including .env files, .git repositories, Docker manifests, credentials or backup archives) | MITRE ATT&CK: T1595.002 (Active Scanning: Vulnerability Scanning). Enforcement: IP banned across all ports (24h quarantine). Automated threat intelligence telemetry.
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 11:42:14
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:42:09.334388 2026] [security2:error] [pid 5501:tid 5501] [client 34.77.231.134:54384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelto.info"] [uri "/.git/config"] [unique_id "atdTkXS9L9U0Y235jIRegAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 11:24:43
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 07:24:34.983729 2026] [security2:error] [pid 1601:tid 1601] [client 34.77.231.134:42468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelsupersonic.com"] [uri "/.git/config"] [unique_id "atdPcmtVCvX6RSUl1EVUggAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
pipeline.es
2026-10-20 10:31:34
(10 hours ago)
Web scanning / probing for vulnerable paths | URL: /mailing/.env | Evidence: travelplanet.pt 34.77.2 ...
show more
Web scanning / probing for vulnerable paths | URL: /mailing/.env | Evidence: travelplanet.pt 34.77.231.134 - - [20/Oct/2026:12:30:33 +0200] \"GET /mailing/.env HTTP/1.1\" 404 20529 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=BE 18627 | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-20 08:29:14
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:29:06.984705 2026] [security2:error] [pid 3452:tid 3452] [client 34.77.231.134:40710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelimts.com"] [uri "/.git/config"] [unique_id "atcmUkpTj_YaIBqhdqcmTAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 07:41:05
(13 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
Anonymous
2026-10-20 07:40:22
(13 hours ago)
34.77.231.134 - - [20/Oct/2026:09:40:18 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows N ...
show more
34.77.231.134 - - [20/Oct/2026:09:40:18 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.231.134 - - [20/Oct/2026:09:40:19 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.231.134 - - [20/Oct/2026:09:40:19 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.231.134 - - [20/Oct/2026:09:40:19 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.231.134 - - [20/Oct/2026:09:40:19 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.77.231.134 - - [20/Oct/2026:0
...
show less
Bad Web Bot
Web App Attack
π¦πΊ
screwlooseit.com.au
2026-10-20 06:57:30
(14 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/134.231.77.34.bc.googleuserconten ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/134.231.77.34.bc.googleusercontent.com
show less
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-19 23:23:01
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.231.134 (134.231.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 19:22:56.699416 2026] [security2:error] [pid 13778:tid 13778] [client 34.77.231.134:48688] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "synergy-sales-assoc.com"] [uri "/.git/config"] [unique_id "atamULEkgHWjIeTwbcwqbQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack