🇺🇸
TPI-Abuse
2026-09-23 17:24:29
(40 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.64.230.136 (136.230.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.230.136 (136.230.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 13:24:23.065317 2026] [security2:error] [pid 680:tid 680] [client 34.64.230.136:38124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "carlsvoice.com"] [uri "/backend/.git/config"] [unique_id "arQLR0SoH0kC5NDIwOo7QAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-23 15:39:40
(2 hours ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /html/.git/config (+11 more) | 2026-09-23 15:39 UTC
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-23 14:39:45
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇨🇭
leo1305
2026-09-23 14:11:13
(3 hours ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
🇺🇦
Olexiy Backend
2026-09-23 12:43:01
(5 hours ago)
34.64.230.136
...
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-23 12:13:40
(5 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-23 09:51:09
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.64.230.136 (136.230.64.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.230.136 (136.230.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 05:51:02.085972 2026] [security2:error] [pid 25618:tid 25618] [client 34.64.230.136:45278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baird.net"] [uri "/wordpress/.git/config"] [unique_id "arOhBlFzbiBbs4rlUawZxwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-23 07:56:53
(10 hours ago)
7.618 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇩🇪
0x44
2026-09-23 06:01:13
(12 hours ago)
TCP SYN Discovery - Flooding
DDoS Attack
🇺🇸
mnsf
2026-09-23 05:05:16
(12 hours ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇫🇷
✨
2026-09-23 02:54:11
(15 hours ago)
Domain : appo11yon.com
Rule : config
2026-09-23 02:52:49 ***hidden-privacy***5 GET /src/.git/config ...
show more
Domain : appo11yon.com
Rule : config
2026-09-23 02:52:49 ***hidden-privacy***5 GET /src/.git/config - 443 - 34.64.230.136 HTTP/1.1 crusader-worker/1.0 - appo11yon.com 404 8 0 1280 100 576 - -
show less
Hacking
SQL Injection
🇫🇷
masterguru
2026-09-23 01:59:11
(16 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇳🇱
Alt255
2026-09-23 01:22:43
(16 hours ago)
[livebd] Web exploit scanning: 9 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 9 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.64.230.136 - - [23/Sep/2026:03:22:39 +0200] "GET /www/.git/config HTTP/1.1" 404 7874 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:03:22:39 +0200] "GET /site/.git/config HTTP/1.1" 404 7874 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:03:22:39 +0200] "GET /app/.git/config HTTP/1.1" 404 7874 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:03:22:39 +0200] "GET /api/.git/config HTTP/1.1" 404 7874 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:03:22:39 +0200] "GET /src/.git/config HTTP/1.1" 404 7874 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:03:22:
...
show less
Bad Web Bot
Web App Attack
🇨🇦
TechnoSolutions CL
2026-09-23 00:09:36
(17 hours ago)
34.64.230.136 - - [23/Sep/2026:00:09:35 +0000] "GET /backend/.git/config HTTP/1.1" 444 0 "-" "crusad ...
show more
34.64.230.136 - - [23/Sep/2026:00:09:35 +0000] "GET /backend/.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
34.64.230.136 - - [23/Sep/2026:00:09:35 +0000] "GET /app/.git/config HTTP/1.1" 444 0 "-" "crusader-worker/1.0"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-09-22 23:22:49
(18 hours ago)
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /app/.git/config HTTP/1.1" 403 189 "-" "crusader ...
show more
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /app/.git/config HTTP/1.1" 403 189 "-" "crusader-worker/1.0" "-" edge="34.64.230.136"
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /www/.git/config HTTP/1.1" 403 189 "-" "crusader-worker/1.0" "-" edge="34.64.230.136"
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /wordpress/.git/config HTTP/1.1" 403 189 "-" "crusader-worker/1.0" "-" edge="34.64.230.136"
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /html/.git/config HTTP/1.1" 403 189 "-" "crusader-worker/1.0" "-" edge="34.64.230.136"
34.64.230.136 - - [22/Sep/2026:23:21:47 +0000] "GET /public/.git/config HTTP/1.1" 403 189 "-" "crusader-worker/1.0" "-" edge="34.64.230.136"
...
show less
Web App Attack