๐บ๐ธ
TPI-Abuse
2026-09-02 00:25:32
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:25:25.151438 2026] [security2:error] [pid 12671:tid 12671] [client 34.88.10.15:60308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "getmypov.com"] [uri "/app/.git/config"] [unique_id "apds9YZEKLq7V3DvVMZq4wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-02 00:20:02
(2 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
Anonymous
2026-09-01 22:10:04
(4 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
www.winos.me
2026-09-01 21:40:02
(4 hours ago)
Shield: Layer4 Port 9 Trap
Port Scan
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-01 18:26:48
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 14:26:39.681716 2026] [security2:error] [pid 8533:tid 8533] [client 34.88.10.15:36972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.luckydawgs.com"] [uri "/.git/config"] [unique_id "apcY33ZxuV97VN4Dx1utDwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 16:16:49
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 12:16:41.006705 2026] [security2:error] [pid 4106:tid 4106] [client 34.88.10.15:53142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elevese.com.restaurantfurnituremart.com"] [uri "/api/.git/config"] [unique_id "apb6aVSkDin6he3wvhgyggAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
IndigoRidge
2026-09-01 15:08:23
(11 hours ago)
34.88.10.15 - - [01/Sep/2026:11:08:23 -0400] "GET /www/.git/config HTTP/1.0" 404 360 "-" "crusader-w ...
show more
34.88.10.15 - - [01/Sep/2026:11:08:23 -0400] "GET /www/.git/config HTTP/1.0" 404 360 "-" "crusader-worker/1.0"
34.88.10.15 - - [01/Sep/2026:11:08:23 -0400] "GET /src/.git/config HTTP/1.0" 404 360 "-" "crusader-worker/1.0"
34.88.10.15 - - [01/Sep/2026:11:08:23 -0400] "GET /htdocs/.git/config HTTP/1.0" 404 360 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-01 13:24:10
(13 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ซ๐ท
dynamix
2026-09-01 13:18:17
(13 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:52:36
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:52:30.165458 2026] [security2:error] [pid 914:tid 914] [client 34.88.10.15:57436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ava-world.com"] [uri "/.git/config"] [unique_id "apagXnW_3mPTNfaY7fSYCwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Ano_Nym
2026-09-01 08:24:25
(18 hours ago)
CrowdSec IDS alert on VPS 85.215.198.123 (DE). Scenario: crowdsecurity/http-sensitive-files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 06:37:25
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.10.15 (15.10.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:37:17.355544 2026] [security2:error] [pid 26336:tid 26336] [client 34.88.10.15:36504] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "virtuallyinfinitesystems.com"] [uri "/.git/config"] [unique_id "apZyneKp-W4UokH6KL-mVgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-09-01 06:00:13
(20 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 36 hits.
show less
Web App Attack
๐ง๐พ
lns.bz
2026-09-01 04:19:16
(22 hours ago)
Too many 404 requests [BY]
Web App Attack
๐ฉ๐ช
netclix.gr
2026-09-01 03:07:12
(23 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.88.10.15 (FI/Finland/15.10.88.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.88.10.15 (FI/Finland/15.10.88.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection