๐ณ๐ด
jad-abuse
2026-09-02 07:17:01
(2 minutes ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, scanner_ua. Observed by 1 sensor(s); 24 hits.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 06:49:41
(30 minutes ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:49:37.490677 2026] [security2:error] [pid 7923:tid 7923] [client 35.240.77.129:57706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rendermatrix.com"] [uri "/site/.git/config"] [unique_id "apfHAeHNgQXDx4cmgjmj8gAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-02 06:17:18
(1 hour ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 06:13:47
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 02:13:43.320244 2026] [security2:error] [pid 1046:tid 1046] [client 35.240.77.129:37074] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.goodpage.com"] [uri "/html/.git/config"] [unique_id "ape-l13hkzViApvVD4puIgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 05:54:53
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:54:47.551333 2026] [security2:error] [pid 18539:tid 18539] [client 35.240.77.129:42758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.skintormint.com"] [uri "/var/www/.git/config"] [unique_id "ape6J7vUgGjRIq2G19CKOQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 05:28:05
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:27:58.742190 2026] [security2:error] [pid 15138:tid 15138] [client 35.240.77.129:50166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bonnesfrequences.com"] [uri "/api/.git/config"] [unique_id "apez3nuX3m8QdnjTrMc9lgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-02 04:39:53
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-02 04:35:04
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:34:59.003275 2026] [security2:error] [pid 4188:tid 4188] [client 35.240.77.129:55248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.killigrewcompany.com"] [uri "/htdocs/.git/config"] [unique_id "apenc5f5vXxyQ7ICytfqSAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-02 04:33:47
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
macrob
2026-09-02 04:31:41
(2 hours ago)
2026/09/02 04:31:40 [error] 2938919#2938919: *546697971 access forbidden by rule, client: 35.240.77. ...
show more
2026/09/02 04:31:40 [error] 2938919#2938919: *546697971 access forbidden by rule, client: 35.240.77.129, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "mail02.fastcredit.net.ua"
2026/09/02 04:31:40 [error] 2938919#2938919: *546697972 access forbidden by rule, client: 35.240.77.129, server: fn.binixo.es, request: "GET /src/.git/config HTTP/2.0", host: "mail02.fastcredit.net.ua"
2026/09/02 04:31:40 [error] 2938918#2938918: *546697973 access forbidden by rule, client: 35.240.77.129, server: fn.binixo.es, request: "GET /wordpress/.git/config HTTP/2.0", host: "mail02.fastcredit.net.ua"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 00:19:26
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 20:19:21.540108 2026] [security2:error] [pid 1042501:tid 1042607] [client 35.240.77.129:38150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.fishrapper.com"] [uri "/api/.git/config"] [unique_id "apdriTf6nb4KkW7Qz_jlEQAAAlI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 23:08:39
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:08:35.373223 2026] [security2:error] [pid 9607:tid 9607] [client 35.240.77.129:60788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "transportation.jbaycabs.com"] [uri "/src/.git/config"] [unique_id "apda84-ivNNJRqW7V41GgQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 20:47:27
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:47:24.352396 2026] [security2:error] [pid 12985:tid 12985] [client 35.240.77.129:34000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cyclingboardgames.net"] [uri "/wordpress/.git/config"] [unique_id "apc53GjVSkzOnrVs5pJSdgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 20:19:28
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.240.77.129 (129.77.240.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 16:19:19.868916 2026] [security2:error] [pid 25197:tid 25197] [client 35.240.77.129:34210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danged.com"] [uri "/html/.git/config"] [unique_id "apczR47gvngiiL_Kj5KJ7AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-09-01 19:20:57
(11 hours ago)
Try to access /src/.git/config
Web App Attack