🇩🇪
Michel Wijnberg
2026-09-06 14:09:45
(22 hours ago)
34.146.116.145 - - [06/Sep/2026:14:09:44 +0000] "GET /backup.tgz HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ...
show more
34.146.116.145 - - [06/Sep/2026:14:09:44 +0000] "GET /backup.tgz HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
langenkamp-media
2026-09-05 23:05:42
(1 day ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
🇫🇷
GEDAL
2026-09-05 12:56:45
(1 day ago)
Fail2ban nginx-git @ <hostname> : 34.146.116.145 - - [05/Sep/2026:14:56:44 +0200] "GET /.git/config ...
show more
Fail2ban nginx-git @ <hostname> : 34.146.116.145 - - [05/Sep/2026:14:56:44 +0200] "GET /.git/config HTTP/1.1" 301 162 "-" "crusader-worker/1.0"
show less
Brute-Force
SSH
🇧🇪
sid3windr
2026-09-05 02:24:38
(2 days ago)
GET /.git/config (Tarpitted for 4m20s, wasted 15.35kB)
Web App Attack
🇩🇪
ddobko
2026-09-04 21:45:06
(2 days ago)
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 21:16:23
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
masterguru
2026-09-04 08:32:49
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇬🇧
consul.to
2026-09-04 08:28:57
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
e.fierstra
2026-09-04 01:33:14
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
Skyrider
2026-09-03 13:24:36
(3 days ago)
crowdsecurity/http-sensitive-files
Web App Attack
Anonymous
2026-09-03 08:00:23
(4 days ago)
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /backend/.git/config HTTP/1.1" 403 12583 "-" "c ...
show more
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /backend/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /app/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /src/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /wordpress/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /api/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /public/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /html/.git/config HTTP/1.1" 403 12583 "-" "crusader-worker/1.0"
34.146.116.145 - - [03/Sep/2026:10:00:22 +0200] "GET /site/.gi
...
show less
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-09-03 05:20:02
(4 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 03:53:15
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 23:53:09.411464 2026] [security2:error] [pid 3911219:tid 3911231] [client 34.146.116.145:58988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-paullederer.com"] [uri "/public/.git/config"] [unique_id "apjvJbOF3ZBLPrVPPRoSFAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 03:31:17
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 23:31:09.441566 2026] [security2:error] [pid 25683:tid 25683] [client 34.146.116.145:54840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keithgill.com"] [uri "/var/www/.git/config"] [unique_id "apjp_UeH9ez2ABHOiepzjwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 02:01:48
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.116.145 (145.116.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 22:01:43.006056 2026] [security2:error] [pid 13268:tid 13268] [client 34.146.116.145:45160] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.thehudsonpress.com"] [uri "/html/.git/config"] [unique_id "apjVB0dzExuiDKGN5ltgBgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack