๐บ๐ธ
TPI-Abuse
2026-09-11 18:49:04
(11 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:48:56.928304 2026] [security2:error] [pid 29265:tid 29265] [client 34.80.49.136:60186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timeless.acupressbooks.com"] [uri "/.git/config"] [unique_id "aqRNGMrOQzKlVEFt-E8DdAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ipoac.nl
2026-09-11 18:48:31
(12 minutes ago)
time.ipoac.nl:443 34.80.49.136 - - [11/Sep/2026:20:48:30 +0200] time.ipoac.nl "GET /.git/config HTTP ...
show more
time.ipoac.nl:443 34.80.49.136 - - [11/Sep/2026:20:48:30 +0200] time.ipoac.nl "GET /.git/config HTTP/1.1" 403 6355 "-" "-"
show less
Bad Web Bot
๐ฎ๐ฉ
Burayot
2026-09-11 18:41:35
(18 minutes ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.80.49.136 (TW/Taiwan/136.49.80.3 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.80.49.136 (TW/Taiwan/136.49.80.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐ซ๐ท
abuseipdb.amaze321
2026-09-11 18:39:52
(20 minutes ago)
Automated reconnaissance: repeated requests for sensitive/non-existent paths.
Web App Attack
Bad Web Bot
๐ฉ๐ช
tsZero
2026-09-11 18:32:30
(28 minutes ago)
Scan example: path=/.git/config status=403
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-11 18:32:09
(28 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 14:32:02.866868 2026] [security2:error] [pid 25865:tid 25865] [client 34.80.49.136:40940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tijuanabible.org"] [uri "/.git/config"] [unique_id "aqRJIiHjpVCfZgJPWG9eHQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-09-11 18:06:18
(54 minutes ago)
Web attack/malicious scanning detected
Web App Attack
๐ต๐ฑ
mscode.pl
2026-09-11 18:02:52
(57 minutes ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Zone: tickets.mscode.pl
Endpoint: /.git/config
UA: Empty string
show less
Bad Web Bot
๐ณ๐ด
jad-abuse
2026-09-11 17:23:21
(1 hour ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 17:14:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:14:07.558852 2026] [security2:error] [pid 12022:tid 12022] [client 34.80.49.136:47898] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thongtracker.com"] [uri "/.git/config"] [unique_id "aqQ238r7ac3d76x53xFz5gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Blexyel
2026-09-11 17:00:54
(1 hour ago)
34.80.49.136 - - [11/Sep/2026:19:00:52 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "-"
...
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 16:57:46
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:57:42.692409 2026] [security2:error] [pid 27215:tid 27215] [client 34.80.49.136:57696] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thishouserestored.leonardodecaprio.com"] [uri "/.git/config"] [unique_id "aqQzBnNZmcxs1LRBWtwJOgAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-11 16:53:13
(2 hours ago)
Try to access /.git/config
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-11 16:27:37
(2 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 16:24:53
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.49.136 (136.49.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:24:47.267198 2026] [security2:error] [pid 13195:tid 13195] [client 34.80.49.136:54180] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thewaywework.com"] [uri "/.git/config"] [unique_id "aqQrT1eX6TAW2lXD5n4n6wAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack