๐บ๐ธ
TPI-Abuse
2026-09-03 12:36:43
(15 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 08:36:36.385408 2026] [security2:error] [pid 16004:tid 16077] [client 34.92.6.103:55572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.abroma.com"] [uri "/htdocs/.git/config"] [unique_id "aplp1IDcdSKVegObJpukoQAAAEY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-03 10:28:41
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-03 08:43:54
(4 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฉ๐ช
kkeyser
2026-09-03 04:16:52
(8 hours ago)
GET /wordpress/.git/config HTTP/1.1
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-03 03:41:03
(9 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 03:19:08
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 23:19:02.243030 2026] [security2:error] [pid 21151:tid 21151] [client 34.92.6.103:53244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jill.seizetheseason.com"] [uri "/wordpress/.git/config"] [unique_id "apjnJrgD2c3qAWruAu1DgAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-09-03 03:05:30
(9 hours ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
SSH
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 02:49:49
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 22:49:44.336176 2026] [security2:error] [pid 17573:tid 17573] [client 34.92.6.103:50644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jjhfamily.com"] [uri "/wordpress/.git/config"] [unique_id "apjgSDyUg4G4x2fbhqV35wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 01:57:31
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:57:25.189008 2026] [security2:error] [pid 15980:tid 15980] [client 34.92.6.103:48876] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.athletestandard.com"] [uri "/.git/config"] [unique_id "apjUBW3KFXqZQUIMPU8HAgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 01:31:54
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:31:50.924264 2026] [security2:error] [pid 5185:tid 5185] [client 34.92.6.103:33308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lesdwiniarczyk.com"] [uri "/public/.git/config"] [unique_id "apjOBgsuWgdOsRD9f98YQAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 01:16:43
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 21:16:37.439115 2026] [security2:error] [pid 27265:tid 27265] [client 34.92.6.103:53144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.gellertdealers.com"] [uri "/htdocs/.git/config"] [unique_id "apjKdesZ4eXi6Ue9wypJ0QAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-09-02 22:01:09
(14 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-02 18:50:56
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 14:50:48.325103 2026] [security2:error] [pid 1045:tid 1045] [client 34.92.6.103:42024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qrsmusicrolls.com.player-care.com"] [uri "/.git/config"] [unique_id "aphwCAoQX0GkyJmSpmmDtAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 16:12:07
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.6.103 (103.6.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 12:11:59.955280 2026] [security2:error] [pid 10996:tid 10996] [client 34.92.6.103:42782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.gcsmith.com"] [uri "/wordpress/.git/config"] [unique_id "aphKzz-nn6Ye0aeHARkK3AAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-09-02 15:59:14
(20 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack