🇳🇱
homeshowdomain.nl
2026-09-02 22:01:41
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
Web App Attack
SSH
Hacking
🇳🇱
javierin
2026-09-02 13:51:00
UTC ·
(2 months ago)
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /backend/.git/config HTTP/1.1" 40 ...
show more
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /backend/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /www/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /html/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /src/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /api/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62.58.244 - xn--nombres-de-nio-2nb.es - - [02/Sep/2026:13:50:59 +0000] "GET /app/.git/config HTTP/1.1" 404 19565 "-" "crusader-worker/1.0"
34.62
...
show less
Hacking
Web App Attack
🇩🇪
Lino Project
2026-09-02 07:39:10
UTC ·
(2 months ago)
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-sensitive-files
Hacking
🇩🇪
raph
2026-09-02 07:02:34
UTC ·
(2 months ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-02 06:10:42
UTC ·
(2 months ago)
[WedSep0208:10:38.2944542026][security2:error][pid2548996:tid2549269][client34.62.58.244:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720 ...
show more
[WedSep0208:10:38.2944542026][security2:error][pid2548996:tid2549269][client34.62.58.244:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mail.safertechnics.ch\"][uri\"/htdocs/.git/config\"][unique_id\"ape93gWv8xxD8wXRtKLq3wAAAMQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:58:46
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:58:41.088516 2026] [security2:error] [pid 31473:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:58:41.088516 2026] [security2:error] [pid 31473:tid 31473] [client 34.62.58.244:55726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.russellsfotos.com"] [uri "/public/.git/config"] [unique_id "ape7ESycupKfnYIzu6yEpwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-02 05:37:04
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
masterguru
2026-09-02 05:15:34
UTC ·
(2 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.62.58.244 (BE/Belgium/244.58.62.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
Hacking
🇫🇷
dynamix
2026-09-02 04:36:26
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇨🇦
polycoda
2026-09-02 04:36:16
UTC ·
(2 months ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 03:37:58
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:37:54.079498 2026] [security2:error] [pid 2215:tid 221 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 23:37:54.079498 2026] [security2:error] [pid 2215:tid 2215] [client 34.62.58.244:43950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "disdis.net.greenlight.us"] [uri "/.git/config"] [unique_id "apeaEmHsZ0hmI04JbOyF-wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Takesh
2026-09-02 03:18:09
UTC ·
(2 months ago)
Numbase auto-report: sensitive_honeypot:/.git/config
Bad Web Bot
🇸🇪
vaia.cloud
2026-09-02 02:40:02
UTC ·
(2 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
Anonymous
2026-09-02 00:09:14
UTC ·
(2 months ago)
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 23:59:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:59:30.408720 2026] [security2:error] [pid 9233:tid 923 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.58.244 (244.58.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 19:59:30.408720 2026] [security2:error] [pid 9233:tid 9233] [client 34.62.58.244:33700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "golfclearance.com.au.bigholegolf.com"] [uri "/public/.git/config"] [unique_id "apdm4u8NViUepsqjrqtPlAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack