๐ง๐ช
sid3windr
2026-09-06 06:25:22
(3 weeks ago)
GET /.git/config (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
๐ฌ๐ง
consul.to
2026-09-06 05:43:47
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
masterguru
2026-09-06 04:34:55
(3 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
Anonymous
2026-09-06 00:58:57
(3 weeks ago)
34.53.185.200 - - [06/Sep/2026:08:58:57 +0800] "GET /html/.git/config HTTP/1.1" 404 196 "-" "crusade ...
show more
34.53.185.200 - - [06/Sep/2026:08:58:57 +0800] "GET /html/.git/config HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
[email protected]
2026-09-06 00:25:19
(3 weeks ago)
34.53.185.200 - - [06/Sep/2026:00:25:18 +0000] "GET /app/.git/config HTTP/1.1" 404 333 "-" "crusader ...
show more
34.53.185.200 - - [06/Sep/2026:00:25:18 +0000] "GET /app/.git/config HTTP/1.1" 404 333 "-" "crusader-worker/1.0"
34.53.185.200 - - [06/Sep/2026:00:25:18 +0000] "GET /public/.git/config HTTP/1.1" 404 333 "-" "crusader-worker/1.0"
34.53.185.200 - - [06/Sep/2026:00:25:18 +0000] "GET /www/.git/config HTTP/1.1" 404 333 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-09-05 14:24:06
(4 weeks ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-09-05 14:23:23.077 |
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-05 12:38:46
(4 weeks ago)
[05/Sep/2026:15:38:46 +0300] -- 34.53.185.200 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git ...
show more
[05/Sep/2026:15:38:46 +0300] -- 34.53.185.200 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ง๐ช
delabiemedia.be
2026-09-05 11:09:04
(4 weeks ago)
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /.git/config HTTP/1.1" 404 162 "-" "crusader-wor ...
show more
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /.git/config HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /html/.git/config HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /www/.git/config HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /backend/.git/config HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.53.185.200 - - [05/Sep/2026:13:09:03 +0200] "GET /public/.git/config HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐ง๐พ
lns.bz
2026-09-05 07:34:28
(4 weeks ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 14:50:15
(4 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.53.185.200 (200.185.53.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.53.185.200 (200.185.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:50:08.322410 2026] [security2:error] [pid 23003:tid 23041] [client 34.53.185.200:57550] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cityofmiddleton.org|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cityofmiddleton.org"] [uri "/storage/logs/laravel.log"] [unique_id "apraoCex7aGucYgIv8ZJhgAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-04 14:32:32
(4 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-04 14:02:32
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.53.185.200 (200.185.53.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.185.200 (200.185.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:02:25.211623 2026] [security2:error] [pid 5074:tid 5074] [client 34.53.185.200:43196] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pamplonaserviciotecnico.ayudaclic.com"] [uri "/.env.production"] [unique_id "aprPcRXekIb2qtBY7M8evwAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-04 12:35:08
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.53.185.200 (200.185.53.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.185.200 (200.185.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:35:02.822422 2026] [security2:error] [pid 8611:tid 8611] [client 34.53.185.200:38468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.paintriver.com"] [uri "/.env.example"] [unique_id "apq69shRkwsx6aZRDDdlZwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-04 12:09:42
(4 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-04 11:19:27
(4 weeks ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196)
show less
Hacking