๐ฎ๐ฉ
sockominfo
2026-09-29 20:00:53
(2 weeks ago)
Active Response: IP 34.80.165.210 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: ...
show more
Active Response: IP 34.80.165.210 Blocked via Firewall Drop. Threat Score: 3.8/10 (LOW). Confidence: 30%. CVSS v3.1: 0/10 (None). CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:N. Bayesian Probability: 40%. MITRE ATT&CK: T1016 (System Network Configuration Discovery). Tactic: TA0001. Freshness: Fresh. Source Reputation: UNKNOWN. Methodology: CVSS 3.1 + Bayesian + Temporal + Environmental + MITRE ATT&CK + OWASP. Standards: ISO/IEC 27065:2022, NIST SP 800-30, IEEE S&P 2020. Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-09-29 19:00:09
(2 weeks ago)
Active Response: IP 34.80.165.210 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Rep ...
show more
Active Response: IP 34.80.165.210 Blocked via Firewall Drop. Threat Score: 0/10 (INFORMATIONAL). Reported by TangerangKota-CSIRT
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 19:28:08
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:28:02.528886 2026] [security2:error] [pid 17755:tid 17755] [client 34.80.165.210:42526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pinman.com"] [uri "/.git/config"] [unique_id "arluQhTV4GH978nsbEBdEAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 19:07:17
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:07:12.637545 2026] [security2:error] [pid 24857:tid 24857] [client 34.80.165.210:39840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.pinkrays.com"] [uri "/.git/config"] [unique_id "arlpYG-WVfIlHPu34yW4ngAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 14:58:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:58:16.735965 2026] [security2:error] [pid 5117:tid 5135] [client 34.80.165.210:58550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gelatoconsapevole.com"] [uri "/.git/config"] [unique_id "arfdiBSmKXR4f3bjH8q8XAAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 18:19:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.165.210 (210.165.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 14:19:45.440600 2026] [security2:error] [pid 28088:tid 28088] [client 34.80.165.210:47078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4bearspress.wolter-hausser.com"] [uri "/.git/config"] [unique_id "ara7QTxAGSn-Gv8JLo4GiQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
mxbl
2026-09-24 13:30:11
(2 weeks ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/config
Web App Attack
Anonymous
2026-09-23 21:38:17
(3 weeks ago)
Automated report (2026-09-24T05:38:17+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:38:11
(3 weeks ago)
Automated report (2026-09-24T05:38:11+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:38:09
(3 weeks ago)
Automated report (2026-09-24T05:38:09+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:38:04
(3 weeks ago)
Automated report (2026-09-24T05:38:04+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:38:03
(3 weeks ago)
Automated report (2026-09-24T05:38:03+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:38:00
(3 weeks ago)
Automated report (2026-09-24T05:38:00+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:37:58
(3 weeks ago)
Automated report (2026-09-24T05:37:58+08:00). Caught probing for env file.
Hacking
Web App Attack
Anonymous
2026-09-23 21:37:52
(3 weeks ago)
Automated report (2026-09-24T05:37:52+08:00). Caught probing for env file.
Hacking
Web App Attack