🇺🇸
Operator873
2026-09-02 04:56:19
(9 minutes ago)
2026/09/01 23:56:13 [error] 2681768#0: *3896613 access forbidden by rule, client: 34.84.100.192, ser ...
show more
2026/09/01 23:56:13 [error] 2681768#0: *3896613 access forbidden by rule, client: 34.84.100.192, server: [OBFUSCATED], request: "GET /html/.git/config HTTP/1.1", host: "mailadmin.ntars.net"
2026/09/01 23:56:13 [error] 2681768#0: *3896613 access forbidden by rule, client: 34.84.100.192, server: [OBFUSCATED], request: "GET /html/.git/config HTTP/1.1", host: "mailadmin.ntars.net"
2026/09/01 23:56:13 [error] 2681767#0: *3896615 access forbidden by rule, client: 34.84.100.192, server: [OBFUSCATED], request: "GET /src/.git/config HTTP/1.1", host: "mailadmin.ntars.net"
2026/09/01 23:56:13 [error] 2681767#0: *3896615 access forbidden by rule, client: 34.84.100.192, server: [OBFUSCATED], request: "GET /src/.git/config HTTP/1.1", host: "mailadmin.ntars.net"
2026/09/01 23:56:13 [error] 2681768#0: *3896614 access forbidden by rule, client: 34.84.100.192, server: [OBFUSCATED], request: "GET /www/.git/config HTTP/1.1", host: "mailadmin.ntars.net"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:35:34
(30 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:35:27.153410 2026] [security2:error] [pid 18197:tid 18197] [client 34.84.100.192:55036] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.whiteweddinginvitations.net"] [uri "/.git/config"] [unique_id "apenj7Zvmfgv-HaKeCA1sgAAAJM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:08:44
(57 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:08:38.430825 2026] [security2:error] [pid 30205:tid 30205] [client 34.84.100.192:38794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dwci.winformation.us"] [uri "/www/.git/config"] [unique_id "apehRnYeYTPyXqcdgtMl6wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-02 01:10:03
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇩🇪
NihiliousMonk
2026-09-02 00:48:53
(4 hours ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
2026-09-01 22:48:43
(6 hours ago)
Excessive 404 errors - web scanning/probing
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-01 22:08:50
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 18:08:42.343033 2026] [security2:error] [pid 20835:tid 20835] [client 34.84.100.192:41000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brainwavecenters.com.darkcodedesign.net"] [uri "/var/www/.git/config"] [unique_id "apdM6tNLdc6zHXOrCnwWlwAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇪
Jim Keir
2026-09-01 15:40:43
(13 hours ago)
2026-09-01 15:40:43 34.84.100.192 Too many redirects/missing files, blocking 34.84.100.192 for 5 min ...
show more
2026-09-01 15:40:43 34.84.100.192 Too many redirects/missing files, blocking 34.84.100.192 for 5 minutes
2026-09-01 15:40:43 34.84.100.192 Too many redirects/missing files, blocking 34.84.100.192 for 5 minutes
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 14:01:08
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 10:01:03.490584 2026] [security2:error] [pid 19600:tid 19600] [client 34.84.100.192:54526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "benshermanguitar.com"] [uri "/src/.git/config"] [unique_id "apbanzphdpq5INZ0LCPzgAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 12:05:25
(17 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇴
jad-abuse
2026-09-01 09:19:27
(19 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 36 hits.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 09:14:26
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:14:21.489330 2026] [security2:error] [pid 9366:tid 9366] [client 34.84.100.192:37312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shannonmatter.com"] [uri "/var/www/.git/config"] [unique_id "apaXbWO0BgSQhSy6vyF9MgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:52:42
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:52:36.988947 2026] [security2:error] [pid 26432:tid 26432] [client 34.84.100.192:33796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "insidepublications.com"] [uri "/app/.git/config"] [unique_id "apaSVKurkqBGM_yPOpgllgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:25:52
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:25:44.205171 2026] [security2:error] [pid 1310:tid 1310] [client 34.84.100.192:34006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intolifeproductions.com"] [uri "/htdocs/.git/config"] [unique_id "apaMCPA1ZqbvuwTLy8IG0QAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:30:45
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.100.192 (192.100.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:30:37.568139 2026] [security2:error] [pid 801:tid 801] [client 34.84.100.192:39782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aridscapes.com"] [uri "/htdocs/.git/config"] [unique_id "apZ_HWjB6g2vz7SjVgymIQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack