๐ง๐ช
sid3windr
2026-06-10 09:14:16
(16 hours ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:00:24
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 14:39:37
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:39:31.259908 2026] [security2:error] [pid 25485:tid 25541] [client 34.89.159.74:34042] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rawhabitat.com"] [uri "/.git/config"] [unique_id "aigloxrpGNtX0Ec20No-vgAAANE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:40:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:40:54.434806 2026] [security2:error] [pid 13665:tid 13665] [client 34.89.159.74:33460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jbaydeliveries.jbaycabs.com"] [uri "/.git/config"] [unique_id "aigX5q35FZBAeZXTlr65MwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:25:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:25:25.103616 2026] [security2:error] [pid 25786:tid 25786] [client 34.89.159.74:40126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.revgolf.five21.com"] [uri "/.git/config"] [unique_id "aigGNVA5swXNkCDfQ_owngAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Inartis
2026-06-09 10:46:49
(1 day ago)
34.89.159.74 - - [09/Jun/2026:12:46:47 +0200] "GET /.git/config HTTP/1.1" 403 5001 "-" "Mozilla/5.0 ...
show more
34.89.159.74 - - [09/Jun/2026:12:46:47 +0200] "GET /.git/config HTTP/1.1" 403 5001 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:2.2a1pre) Gecko/20100101 Firefox/4.2a1pre"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:08:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:08:08.419185 2026] [security2:error] [pid 27192:tid 27192] [client 34.89.159.74:34176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oualierealty.com"] [uri "/.git/config"] [unique_id "aifmCHcocbjgeolTWGeGGwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 09:41:27
(1 day ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.89.159.74 (DE/Germany/74.159.89.34 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.89.159.74 (DE/Germany/74.159.89.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐ณ๐ฑ
bazter.pro
2026-06-09 08:59:17
(1 day ago)
34.89.159.74 - - [09/Jun/2026:08:59:16 +0000] "GET /.git/config HTTP/1.1" 404 297 "-" "Mozilla/5.0 ( ...
show more
34.89.159.74 - - [09/Jun/2026:08:59:16 +0000] "GET /.git/config HTTP/1.1" 404 297 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36"
...
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
SSH
๐บ๐ธ
TPI-Abuse
2026-06-09 08:58:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:58:05.518266 2026] [security2:error] [pid 19042:tid 19042] [client 34.89.159.74:43768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sweetpeachcupcakes.shawnlayne.com"] [uri "/.git/config"] [unique_id "aifVnbzDINWZsVRE468GMAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:22:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:22:05.422219 2026] [security2:error] [pid 28269:tid 28271] [client 34.89.159.74:33818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sunshinepumpers.com"] [uri "/.git/config"] [unique_id "aiexDXlNNpFq1rfX2FC4swAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:26:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:26:51.376436 2026] [security2:error] [pid 10928:tid 10928] [client 34.89.159.74:48478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "intellectualcapitalmanagementsystems.com"] [uri "/.git/config"] [unique_id "aiekG7ypA7tP0F-bWapdJwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
nate naten
2026-06-09 05:09:22
(1 day ago)
HoneyTrap: git_config attempt on /.git/config from Germany
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:49:02
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:48:54.262450 2026] [security2:error] [pid 18405:tid 18405] [client 34.89.159.74:39468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mhservice.mayan.abecasis.com"] [uri "/.git/config"] [unique_id "aiebNipOxZP77YrYWkVY8AAAAFo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:09:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.89.159.74 (74.159.89.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:09:08.937500 2026] [security2:error] [pid 26427:tid 26427] [client 34.89.159.74:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.swarnar.com"] [uri "/.git/config"] [unique_id "aieR5APpJ7AbEcFXNCRK_QAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack