🇩🇪
klaus_ph
2026-09-23 10:25:14
(6 hours ago)
2026-09-22 23:11:03,177 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.73.84.104
...
Bad Web Bot
🇺🇸
craudiovizai
2026-09-22 12:30:51
(1 day ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked a ...
show more
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
show less
Web App Attack
Bad Web Bot
🇫🇮
YF
2026-09-21 20:00:44
(1 day ago)
Git config exposure probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 19:49:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:49:35.189353 2026] [security2:error] [pid 15839:tid 15839] [client 34.73.84.104:39910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "erkan.net"] [uri "/.git/config"] [unique_id "arGKTxzJ98frV-a8pMlaKAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 19:48:02
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇧🇪
cmbplf
2026-09-21 19:36:28
(1 day ago)
1.821 requests with url.path */.git/config
656 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇩🇪
pltcldvlpr
2026-09-21 19:27:45
(1 day ago)
CMS/framework probe: 34.73.84.104 - - [21/Sep/2026:21:27:44 +0200] "GET /.git/config HTTP/1.1" 444 0 ...
show more
CMS/framework probe: 34.73.84.104 - - [21/Sep/2026:21:27:44 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "-" asn=396982 org="Google LLC" country=US
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 19:02:08
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 15:02:03.802470 2026] [security2:error] [pid 23443:tid 23443] [client 34.73.84.104:52094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emmavance.com"] [uri "/.git/config"] [unique_id "arF_KxcpjqidcWZrKrxXBwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-21 18:57:31
(1 day ago)
[Tue Sep 22 04:57:30.160055 2026] [security2:error] [pid 148653] [client 34.73.84.104:46200] [client ...
show more
[Tue Sep 22 04:57:30.160055 2026] [security2:error] [pid 148653] [client 34.73.84.104:46200] [client 34.73.84.104] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "embodiment.mareeshefford.com"] [uri "/.git/config"] [unique_id "arF-Gu3Km-yYfPE_BO556wAAAAs"]
...
show less
Web App Attack
2026-09-21 18:55:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇫🇷
ELYAZ
2026-09-21 18:39:52
(1 day ago)
(y3) Failed access -byebye- from 34.73.84.104 (US/United States/104.84.73.34.bc.googleusercontent.co ...
show more
(y3) Failed access -byebye- from 34.73.84.104 (US/United States/104.84.73.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
🇳🇱
Starburst SysOp Team
2026-09-21 18:38:01
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-ams6-1)
Hacking
Web App Attack
2026-09-21 18:26:59
(1 day ago)
Scanner hitting /.git/config on element.osef.cloud (GOOGL-2) — aaguard
Brute-Force
Port Scan
🇺🇸
TPI-Abuse
2026-09-21 18:24:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.73.84.104 (104.84.73.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 14:24:03.682301 2026] [security2:error] [pid 10568:tid 10682] [client 34.73.84.104:43596] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electriccommunicationsmarketing.org.bestofthis.com"] [uri "/.git/config"] [unique_id "arF2Qxc1DyCdG7AoMRly-AAAAIg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-21 18:16:07
(1 day ago)
Web application attack detected.
Web App Attack