๐บ๐ธ
TPI-Abuse
2026-06-13 16:51:41
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 12:51:36.430287 2026] [security2:error] [pid 7983:tid 7996] [client 35.241.76.104:53088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.malia97.thebiglies.com"] [uri "/.git/config"] [unique_id "ai2KmCeh6ST-CF_p7AZS0AAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 12:43:19
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:43:14.062671 2026] [security2:error] [pid 28948:tid 28948] [client 35.241.76.104:50864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rums-of-the-world.com"] [uri "/.git/config"] [unique_id "ai1QYp5z9NkN1BlqLTMrWQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
McClay
2026-06-13 12:38:57
(5 hours ago)
Illegal access attempt:35.241.76.104 - - [13/Jun/2026:14:38:56 +0200] "GET /.git/config HTTP/1.1" 40 ...
show more
Illegal access attempt:35.241.76.104 - - [13/Jun/2026:14:38:56 +0200] "GET /.git/config HTTP/1.1" 404 3617 "-" "Mozilla/5.0 (Linux; Android 9; SM-G950F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 Mobile Safari/537.36"
...
show less
Hacking
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-13 12:38:12
(5 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
Anonymous
2026-06-13 11:35:02
(6 hours ago)
suspicious request in access.log
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-13 10:27:25
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 09:41:49
(8 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:41:44.372539 2026] [security2:error] [pid 3644:tid 3644] [client 35.241.76.104:49960] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "auranet.cescfoundation.org"] [uri "/.git/config"] [unique_id "ai0l2BJ1_yfWWAK5xKy8WAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 09:26:02
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:25:56.941309 2026] [security2:error] [pid 9671:tid 9671] [client 35.241.76.104:47000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ilikeabe.com"] [uri "/.git/config"] [unique_id "ai0iJLvoD8Et7kz6DqSy4wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-13 09:19:38
(9 hours ago)
[SatJun1311:19:32.1940442026][security2:error][pid457813:tid458250][client35.241.76.104:0]ModSecurit ...
show more
[SatJun1311:19:32.1940442026][security2:error][pid457813:tid458250][client35.241.76.104:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.pro2green.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"ai0gpMz2oZF9kclxu4xSSgAAAIU\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 08:51:46
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:51:40.651379 2026] [security2:error] [pid 457:tid 457] [client 35.241.76.104:40794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.theaccentsnet2019.mainstreetofficesuites.com"] [uri "/.git/config"] [unique_id "ai0aHJt-wjXsGaMV1YMn8AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski
2026-06-13 07:45:12
(10 hours ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
4server
2026-06-13 05:20:04
(13 hours ago)
[SatJun1307:20:00.4785912026][security2:error][pid617801:tid617868][client35.241.76.104:0]ModSecurit ...
show more
[SatJun1307:20:00.4785912026][security2:error][pid617801:tid617868][client35.241.76.104:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"cnv.wildpferde.ch\"][uri\"/.git/config\"][unique_id\"aizogLLvthUY0iGI1s9UmgAAAIQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 05:03:51
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:03:47.878010 2026] [security2:error] [pid 7661:tid 7666] [client 35.241.76.104:56212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shieldsenterprisesusa.com"] [uri "/.git/config"] [unique_id "aizks94V7v2MDRFfHopvXwAAAYE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 04:41:26
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.241.76.104 (104.76.241.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:41:20.487242 2026] [security2:error] [pid 27829:tid 27829] [client 35.241.76.104:49288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vidalwrightlaw.com"] [uri "/.git/config"] [unique_id "aizfcF3FCYX-s4EZSE_mMAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-13 04:06:32
(14 hours ago)
Abuse Detected (1)
Brute-Force
Web App Attack