🇳🇱
homeshowdomain.nl
2026-06-09 22:00:08
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 15:50:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:50:06.973069 2026] [security2:error] [pid 14326:tid 14348] [client 146.148.61.118:52282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nrgla.com"] [uri "/.git/config"] [unique_id "aig2Ltl-gtKpK_MPLyv_qQAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 15:05:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:05:11.709734 2026] [security2:error] [pid 9419:tid 9419] [client 146.148.61.118:44394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.iplayriichi.com"] [uri "/.git/config"] [unique_id "aigrpxRNQOOxmSKy-0E9UgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 14:56:27
(1 week ago)
[TueJun0916:56:23.5569662026][security2:error][pid1555785:tid1556706][client146.148.61.118:0]ModSecu ...
show more
[TueJun0916:56:23.5569662026][security2:error][pid1555785:tid1556706][client146.148.61.118:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"giuristifriburgo.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aigpl_WGk1JqC1vmUzOgEAAAAQ8\"]
show less
Hacking
Web App Attack
🇬🇧
Greg Poulson
2026-06-09 14:24:57
(1 week ago)
Our website was hit by this DDOS at a rate of 217 in 5 minutes.
DDoS Attack
Web Spam
Brute-Force
🇩🇪
iNetWorker
2026-06-09 14:24:43
(1 week ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 13:59:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:59:10.166609 2026] [security2:error] [pid 27043:tid 27043] [client 146.148.61.118:33790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.arcadiapropertiesllc.starrmail.net"] [uri "/.git/config"] [unique_id "aigcLlrgYkL3bvs4FcyJBAAAAF0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-09 13:23:43
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 13:17:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:17:31.436627 2026] [security2:error] [pid 18076:tid 18076] [client 146.148.61.118:47436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.oshkoshvolleyball.com"] [uri "/.git/config"] [unique_id "aigSa_yIE3Rw-fSKcvcLiAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
homeodor
2026-06-09 10:46:23
(1 week ago)
Automated scanner detected.
Hacking
Web App Attack
🇫🇷
masterguru
2026-06-09 10:41:37
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 146.148.61.118 (US/United States/118. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 146.148.61.118 (US/United States/118.61.148.146.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇺🇸
TPI-Abuse
2026-06-09 10:27:43
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:27:40.199424 2026] [security2:error] [pid 26033:tid 26033] [client 146.148.61.118:51440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.advisorstudios.cms2020.com"] [uri "/.git/config"] [unique_id "aifqnODlziNEgyTvYb1pOAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:09:25
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:09:18.732600 2026] [security2:error] [pid 18319:tid 18319] [client 146.148.61.118:39750] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "coyotebytes.net"] [uri "/.git/config"] [unique_id "aifmTjBeJ7uZL1ZbgYHbDwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IVski
2026-06-09 09:20:46
(1 week ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:26:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 146.148.61.118 (118.61.148.146.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:26:08.790308 2026] [security2:error] [pid 7171:tid 7171] [client 146.148.61.118:39212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electricmeatgrinder.com"] [uri "/.git/config"] [unique_id "aifAEIB3mYi_l0mD4jxMXwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack