🇳🇱
homeshowdomain.nl
2026-08-06 22:00:53
UTC ·
(3 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-05.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-08-05 18:59:18
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 14:59:13.056567 2026] [security2:error] [pid 3719412:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 14:59:13.056567 2026] [security2:error] [pid 3719412:tid 3719412] [client 34.23.192.52:34460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "elimer.com.ve"] [uri "/.git/config"] [unique_id "anOIAacCEJXtTNrmPDbpWQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
yitzhaq
2026-08-05 18:37:34
UTC ·
(3 months ago)
34.23.192.52 - - [05/Aug/2026:20:29:31 +0200] "GET /.git/config HTTP/1.1" 403 4437 "-" "-"
34.23.192.52 - - [05/Aug/2026:20:34:17 +0200] "GET /.git/config HTTP/1.1" 403 4444 "-" "-"
34.23.192.52 - - [05/Aug/2026:20:37:32 +0200] "GET /.git/config HTTP ...
show more
34.23.192.52 - - [05/Aug/2026:20:29:31 +0200] "GET /.git/config HTTP/1.1" 403 4437 "-" "-"
34.23.192.52 - - [05/Aug/2026:20:34:17 +0200] "GET /.git/config HTTP/1.1" 403 4444 "-" "-"
34.23.192.52 - - [05/Aug/2026:20:37:32 +0200] "GET /.git/config HTTP/1.1" 403 4440 "-" "-"
show less
Web App Attack
Hacking
🇨🇦
polycoda
2026-08-05 18:25:52
UTC ·
(3 months ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇧🇪
cmbplf
2026-08-05 17:33:45
UTC ·
(3 months ago)
1.347 requests with url.path */.git/config
1.247 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-05 16:54:05
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 12:54:00.014559 2026] [security2:error] [pid 3689954:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 12:54:00.014559 2026] [security2:error] [pid 3689954:tid 3689971] [client 34.23.192.52:47804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abadie.com.uy"] [uri "/.git/config"] [unique_id "anNqqCuEWb9v66oSVqDXxAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
mnazibo
2026-08-05 16:00:06
UTC ·
(3 months ago)
Date: 05/Aug/2026 19:00:00 | Reported IP: 34.23.192.52 mod_security | id: 930130 | US/group.my_domain/- | Connections: 1 | Blocked: Permanent Block: [LF_MODSEC] | URIs: /.git/config | Logs: Restricted File Access Attempt
SQL Injection
Brute-Force
Bad Web Bot
Anonymous
2026-08-05 16:00:03
UTC ·
(3 months ago)
34.23.192.52 - - [05/Aug/2026:13:00:01 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "-"
...
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-08-05 15:50:15
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 11:50:07.689884 2026] [security2:error] [pid 2959505:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 11:50:07.689884 2026] [security2:error] [pid 2959505:tid 2959625] [client 34.23.192.52:54256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bigwheel-design.com"] [uri "/.git/config"] [unique_id "anNbr6kYG3_V9lKwmlK9NQAAAM8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-08-05 15:24:46
UTC ·
(3 months ago)
34.23.192.52 - - [05/Aug/2026:17:24:43 +0200] "GET /.git/config HTTP/1.1" 403 5250 "-" "-"
...
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-08-05 15:04:41
UTC ·
(3 months ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
TPI-Abuse
2026-08-05 14:38:34
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 10:38:30.341955 2026] [security2:error] [pid 2142340:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.192.52 (52.192.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 05 10:38:30.341955 2026] [security2:error] [pid 2142340:tid 2142340] [client 34.23.192.52:34980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyskinhappylife.com"] [uri "/.git/config"] [unique_id "anNK5nOPB-zQ1DNZ40LNnQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-08-05 14:22:41
UTC ·
(3 months ago)
34.23.192.52 - - [05/Aug/2026:16:22:39 +0200] "GET /.git/config HTTP/1.1" 404 4622 "-" "-" 34.23.192.52 - - [05/Aug/2026:16:22:40 +0200] "GET /.git/config HTTP/1.1" 404 4622 "-" "-" 34.23.192.52 - - [05/Aug/2026:16:22:41 +0200] "GET /.git/config HTTP ...
show more
34.23.192.52 - - [05/Aug/2026:16:22:39 +0200] "GET /.git/config HTTP/1.1" 404 4622 "-" "-" 34.23.192.52 - - [05/Aug/2026:16:22:40 +0200] "GET /.git/config HTTP/1.1" 404 4622 "-" "-" 34.23.192.52 - - [05/Aug/2026:16:22:41 +0200] "GET /.git/config HTTP/1.1" 404 4621 "-" "-"
show less
Brute-Force
Anonymous
2026-08-05 14:07:02
UTC ·
(3 months ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-08-05 13:25:58.
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-08-05 14:07:01
UTC ·
(3 months ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [mx01]
Hacking
SQL Injection
Web App Attack