🇺🇸
TPI-Abuse
2026-08-29 23:55:14
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 19:55:06.676845 2026] [security2:error] [pid 11822:tid 11822] [client 34.60.92.19:57152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "williambarfoot.com"] [uri "/wordpress/.git/config"] [unique_id "apNxWndMk-7Wuz9UpJyUUwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-08-29 23:35:12
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.60.92.19 (US/United States/19.92.60. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.60.92.19 (US/United States/19.92.60.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇩🇪
0x44
2026-08-29 19:08:48
(19 hours ago)
TCP SYN Discovery - Flooding
DDoS Attack
🇫🇮
paissangroup
2026-08-29 09:06:19
(1 day ago)
Multiple WAF Violations
Web App Attack
🇸🇪
Per-Erik Runebert
2026-08-29 08:39:17
(1 day ago)
Excessive unauthorized requests
Hacking
Anonymous
2026-08-29 05:00:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 04:08:48
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 00:08:43.178558 2026] [security2:error] [pid 10044:tid 10044] [client 34.60.92.19:60500] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "servicesafes.com"] [uri "/src/.git/config"] [unique_id "apJbS8mU8IaMgP_uQjYwewAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
wbsouza
2026-08-29 03:26:32
(1 day ago)
CrowdSec: crowdsecurity/http-sensitive-files — automated firewall drops on self-hosted IDS sensor
Hacking
🇸🇪
vaia.cloud
2026-08-28 23:35:01
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-28 22:00:37
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking
🇩🇪
yitzhaq
2026-08-28 19:39:43
(1 day ago)
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /backend/.git/config HTTP/1.1" 404 4433 "-" "crusa ...
show more
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /backend/.git/config HTTP/1.1" 404 4433 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /www/.git/config HTTP/1.1" 404 4434 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /htdocs/.git/config HTTP/1.1" 404 4435 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /site/.git/config HTTP/1.1" 404 4434 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /.git/config HTTP/1.1" 403 4437 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /html/.git/config HTTP/1.1" 404 4435 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4434 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /app/.git/config HTTP/1.1" 404 4434 "-" "crusader-worker/1.0"
34.60.92.19 - - [28/Aug/2026:21:39:39 +0200] "GET /public/.git/config HTTP/1.1" 404 4434 "-" "c
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-28 18:13:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 14:13:27.446286 2026] [security2:error] [pid 7482:tid 7482] [client 34.60.92.19:50792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mail1.shirtzz.com"] [uri "/app/.git/config"] [unique_id "apHPx2LuxlHrWz25FPE0GwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-28 14:44:01
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-28 13:05:37
(2 days ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:10:50
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.92.19 (19.92.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:10:45.082003 2026] [security2:error] [pid 5542:tid 5593] [client 34.60.92.19:50128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fastesttrademark.com"] [uri "/var/www/.git/config"] [unique_id "apF6xbMmR7jBSrW6msW_vQAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack