🇲🇾
Rizzy
2026-09-16 17:00:05
(3 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇧🇷
dominioz
2026-09-16 16:45:37
(3 hours ago)
2026-09-16 16:44:30 GET /.env - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/ ...
show more
2026-09-16 16:44:30 GET /.env - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 611
2026-09-16 16:44:32 GET /.env.local - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 623
2026-09-16 16:44:33 GET /.env.production - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 633
2026-09-16 16:44:34 GET /.env.staging - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 627
2026-09-16 16:44:35 GET /.env.development - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 635
2026-09-16 16:44:36 GET /.env.test - - 34.97.81.130 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+lik
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 14:49:53
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:49:47.633533 2026] [security2:error] [pid 20123:tid 20156] [client 34.97.81.130:50172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.americanacademyofprojectmanagement.com.aafm.us"] [uri "/.git/config"] [unique_id "aqqsi2OydN8_yGqoPciFGAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 14:05:33
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 10:05:26.386459 2026] [security2:error] [pid 15300:tid 15309] [client 34.97.81.130:33030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amd64world.crowns.org"] [uri "/.git/config"] [unique_id "aqqiJgv1cVZ423rw7e6AyQAAAYc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-16 12:49:09
(7 hours ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 05:37:15
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:37:08.506947 2026] [security2:error] [pid 6447:tid 6447] [client 34.97.81.130:52224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.argcreativegroup.com"] [uri "/.git/config"] [unique_id "aqorBMB_z09RoeWv7FWqLAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-16 04:53:43
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-16 03:00:03
(17 hours ago)
suspicious request in access.log
Web App Attack
🇫🇷
masterguru
2026-09-16 02:44:12
(17 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇸🇪
vaia.cloud
2026-09-16 02:10:02
(18 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-16 01:36:51
(18 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-16 00:51:34
(19 hours ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-16 00:49:32
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.97.81.130 (130.81.97.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:49:24.783267 2026] [security2:error] [pid 9166:tid 9166] [client 34.97.81.130:59690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.area1.idahouspsa.com"] [uri "/.git/config"] [unique_id "aqnnlCwqVfHZ3dlR-DcO5wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
noise.agency
2026-09-15 23:42:24
(20 hours ago)
34.97.81.130 (JP/Japan/130.81.97.34.bc.googleusercontent.com), more than 30 Apache 404 hits
Hacking
🇱🇺
conseilgouz
2026-09-15 23:33:18
(20 hours ago)
are-17 : Block hidden directories=>/.git/config(/)
Hacking