🇺🇸
RH5
2026-09-04 23:06:16
UTC ·
(2 months ago)
Restricted URL probing (/.git) (UTC 2026-09-04 23:06)
Web App Attack
🇩🇪
Marc
2026-09-04 22:38:45
UTC ·
(2 months ago)
34.76.194.212 - - [05/Sep/2026:00:38:44 +0200] "GET /public/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.76.194.212 - - [05/Sep/2026:00:38:44 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.76.194.212 - ...
show more
34.76.194.212 - - [05/Sep/2026:00:38:44 +0200] "GET /public/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.76.194.212 - - [05/Sep/2026:00:38:44 +0200] "GET /var/www/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0" 34.76.194.212 - - [05/Sep/2026:00:38:44 +0200] "GET /src/.git/config HTTP/1.1" 404 4617 "-" "crusader-worker/1.0"
show less
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-04 22:01:33
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-03.
Web App Attack
SSH
Hacking
Anonymous
2026-09-04 21:52:39
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-04 21:32:26
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 18:34:57
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 14:34:54.044524 2026] [security2:error] [pid 8297:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 14:34:54.044524 2026] [security2:error] [pid 8297:tid 8341] [client 34.76.194.212:48566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.heworeblack.com"] [uri "/backend/.git/config"] [unique_id "apsPTlF0V6dcAmwFugfkLgAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 18:00:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 14:00:17.461229 2026] [security2:error] [pid 10824:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 14:00:17.461229 2026] [security2:error] [pid 10824:tid 10824] [client 34.76.194.212:51948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tributetoelvis.com"] [uri "/var/www/.git/config"] [unique_id "apsHMfuImdCU426tax4jZQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 16:48:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 12:48:17.048620 2026] [security2:error] [pid 30378:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 12:48:17.048620 2026] [security2:error] [pid 30378:tid 30378] [client 34.76.194.212:36424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "darkcodedesign.net"] [uri "/www/.git/config"] [unique_id "apr2UaCs3TWKm1DCa7_bTQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-09-04 16:16:53
UTC ·
(2 months ago)
"GET /src/.git/config HTTP/1.1" 404
"GET /backend/.git/config HTTP/1.1" 404
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 15:57:52
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:57:48.008130 2026] [security2:error] [pid 31854:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:57:48.008130 2026] [security2:error] [pid 31854:tid 31854] [client 34.76.194.212:37198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nldi.us"] [uri "/htdocs/.git/config"] [unique_id "aprqfGZrPZba46KlhyPhpAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 12:00:03
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:59:56.921178 2026] [security2:error] [pid 2824996:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:59:56.921178 2026] [security2:error] [pid 2824996:tid 2825039] [client 34.76.194.212:53518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramonagrapestomp.mailporte.com"] [uri "/api/.git/config"] [unique_id "apqyvB0fUXAXMoF-M9v1sgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stara
2026-09-04 09:58:22
UTC ·
(2 months ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
SSH
Web App Attack
🇬🇧
Aetherweb Ark
2026-09-04 08:11:59
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.76.194.212 (BE/Belgium/212.194.76.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇬🇧
consul.to
2026-09-04 05:59:54
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 04:56:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:56:06.847596 2026] [security2:error] [pid 13577:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.194.212 (212.194.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 00:56:06.847596 2026] [security2:error] [pid 13577:tid 13577] [client 34.76.194.212:50490] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.henning.org"] [uri "/src/.git/config"] [unique_id "appPZg5hN8K256QJJO2ttAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack