2026-11-15 20:49:24
UTC ·
(9 minutes ago)
34.67.60.10 - - [15/Nov/2026:21:49:23 +0100] "GET /.git/config HTTP/1.1" 301 169 "-" "-"
Web App Attack
🇸🇪
FrontQ
2026-11-15 20:21:07
UTC ·
(38 minutes ago)
Blocked and banned by CrowdSec on our servers: crowdsecurity/vpatch-git-config
Bad Web Bot
Web App Attack
🇩🇪
Holger
2026-11-15 20:01:59
UTC ·
(57 minutes ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Bedios GmbH
2026-11-15 19:17:41
UTC ·
(1 hour ago)
Scanning for exposed credentials and private keys
Hacking
🇺🇸
TPI-Abuse
2026-11-15 19:13:46
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:13:39.371292 2026] [security2:error] [pid 23592:tid 2359 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 14:13:39.371292 2026] [security2:error] [pid 23592:tid 23592] [client 34.67.60.10:38490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrprentice.com"] [uri "/.git/config"] [unique_id "avoEYx7UjZhUKxXp9V6sBwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 18:50:31
UTC ·
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:50:24.247366 2026] [security2:error] [pid 7245:tid 7245] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 13:50:24.247366 2026] [security2:error] [pid 7245:tid 7245] [client 34.67.60.10:41768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mrepoch.art"] [uri "/.git/config"] [unique_id "avn-8Orf7VZRm8S8QCXnpgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
craudiovizai
2026-11-15 18:30:33
UTC ·
(2 hours ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.git/config. Blocked at the edge.
Bad Web Bot
🇺🇸
CBJ
2026-11-15 18:01:19
UTC ·
(2 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇺🇸
tdamg
2026-11-15 18:00:22
UTC ·
(2 hours ago)
Automated probing for secret and config files (.env, cloud credential files): 1 refused requests to 1 distinct paths (HTTP 403/404), 2026-11-15 18:00 to 18:00 UTC. Blocked at firewall.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-15 17:51:35
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:51:28.623987 2026] [security2:error] [pid 6928:tid 6928] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:51:28.623987 2026] [security2:error] [pid 6928:tid 6928] [client 34.67.60.10:38468] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ouguergouz.com"] [uri "/.git/config"] [unique_id "avnxIH6bUnMAfT4G5rl5oQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-15 17:50:03
UTC ·
(3 hours ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇩🇪
Blexyel
2026-11-15 17:35:36
UTC ·
(3 hours ago)
34.67.60.10 - - [15/Nov/2026:18:35:35 +0100] "GET /.git/config HTTP/1.1" 404 13 "-" "-"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 17:34:05
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:34:00.243320 2026] [security2:error] [pid 14813:tid 1481 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.67.60.10 (10.60.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 12:34:00.243320 2026] [security2:error] [pid 14813:tid 14813] [client 34.67.60.10:53414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "otraes.com"] [uri "/.git/config"] [unique_id "avntCEo80kWjKl8R9fZWLgAAADo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kkw
2026-11-15 17:33:34
UTC ·
(3 hours ago)
[REDACTED] 34.67.60.10 - - [15/Nov/2026:18:33:33 +0100] "GET /.git/config HTTP/1.1" 401 4713 "-" "-"
... (mode: searching http-sensitive-files)
Bad Web Bot
Web App Attack
🇩🇰
ScamAware
2026-11-15 17:21:40
UTC ·
(3 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 1. Unique request paths counted internally: 1. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
