2026-09-01 16:43:51
(1 hour ago)
Web probing (24 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by C ...
show more
Web probing (24 hits in 24h) on default-vhost: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 15:21:35
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.105.187 (187.105.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.105.187 (187.105.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 11:21:28.245765 2026] [security2:error] [pid 1054594:tid 1054613] [client 34.126.105.187:33258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tusappsonline.com"] [uri "/htdocs/.git/config"] [unique_id "apbteM1f5YW-1DOW_PkQ0wAAARE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-01 14:03:50
(4 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
Feelautom
2026-09-01 13:10:13
(5 hours ago)
[FeelAutom Auto-Ban] PathScan: /html/.git/config (Score: 200)
Port Scan
🇵🇹
rooster
2026-09-01 11:58:10
(6 hours ago)
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/.git/config" [Client 34.126.105 ...
show more
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/.git/config" [Client 34.126.105.187] [Length 150] [Gzip -] "crusader-worker/1.0" "-"
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/app/.git/config" [Client 34.126.105.187] [Length 150] [Gzip -] "crusader-worker/1.0" "-"
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/backend/.git/config" [Client 34.126.105.187] [Length 150] [Gzip -] "crusader-worker/1.0" "-"
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/api/.git/config" [Client 34.126.105.187] [Length 150] [Gzip -] "crusader-worker/1.0" "-"
[01/Sep/2026:12:58:09 +0100] 404 - GET http homelab604.duckdns.org "/src/.git/config" [Client 34.126.105.187] [Length 150] [Gzip -] "crusader-worker/1.0" "-"
...
show less
Hacking
Web App Attack
🇨🇭
Origon
2026-09-01 11:04:17
(7 hours ago)
http-sensitive-files - IP: 34.126.105.187 - time="2026-09-01T13:04:17+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.126.105.187 - time="2026-09-01T13:04:17+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.126.105.187 (SG/396982) : 4h ban on Ip 34.126.105.187" module=db
show less
Web App Attack
🇨🇭
Ribeye375
2026-09-01 10:31:40
(7 hours ago)
HIPS web-exfiltration - Block tcp/0:65535
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:03:15
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.126.105.187 (187.105.126.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.105.187 (187.105.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:03:11.611100 2026] [security2:error] [pid 7515:tid 7515] [client 34.126.105.187:42430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.mlundp.com"] [uri "/backend/.git/config"] [unique_id "apai3xjhCFuD6hiOygzqrgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
Abuse Buster
2026-09-01 02:59:53
(15 hours ago)
34.126.105.187 - - [01/Sep/2026:04:59:52 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "crusader-wo ...
show more
34.126.105.187 - - [01/Sep/2026:04:59:52 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "crusader-worker/1.0"
34.126.105.187 - - [01/Sep/2026:04:59:52 +0200] "GET /wordpress/.git/config HTTP/1.1" 301 162 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇺🇸
mnsf
2026-08-31 23:05:54
(19 hours ago)
Too many Status 50X (24)
Scanning/Probing (24)
Brute-Force
Web App Attack