🇳🇱
homeshowdomain.nl
2026-02-12 22:59:33
UTC ·
(9 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-02-11.
Hacking
Web App Attack
SSH
🇸🇪
SkyDancer
2026-02-12 07:31:54
UTC ·
(9 months ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
Hacking
Brute-Force
🇬🇧
openstrike.co.uk
2026-02-12 06:15:01
UTC ·
(9 months ago)
5 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇳🇱
homeshowdomain.nl
2026-02-11 22:59:11
UTC ·
(9 months ago)
Auto-ban: >3000 req/min op 2026-02-11
Hacking
Web App Attack
SSH
🇧🇪
cmbplf
2026-02-11 22:45:30
UTC ·
(9 months ago)
1.141 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-02-11 21:19:06
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 16:19:03.232538 2026] [security2:error] [pid 29618:tid 29618] [client 174.138.65.183:58216] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 16:19:03.232538 2026] [security2:error] [pid 29618:tid 29618] [client 174.138.65.183:58216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepinesokc.org"] [uri "/.git/config"] [unique_id "aYzyR8IjC630laYLale_NQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 20:12:21
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 15:12:16.565488 2026] [security2:error] [pid 19400:tid 19400] [client 174.138.65.183:38924] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 15:12:16.565488 2026] [security2:error] [pid 19400:tid 19400] [client 174.138.65.183:38924] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "srsrestoration.net"] [uri "/.git/config"] [unique_id "aYzioOdbpp-ArGYIh7FwPAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 19:47:55
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:47:51.828964 2026] [security2:error] [pid 7523:tid 7523] [client 174.138.65.183:54806] M ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 14:47:51.828964 2026] [security2:error] [pid 7523:tid 7523] [client 174.138.65.183:54806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smokeydoesit.com"] [uri "/.git/config"] [unique_id "aYzc5xI_O0EQTI0NzaCUxQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 15:39:05
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 10:38:58.031233 2026] [security2:error] [pid 26988:tid 26988] [client 174.138.65.183:55308] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 10:38:58.031233 2026] [security2:error] [pid 26988:tid 26988] [client 174.138.65.183:55308] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "unitoolsupplies.com"] [uri "/.git/config"] [unique_id "aYyikpp-mX_s65ss4VvijQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 14:05:32
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 09:05:28.756335 2026] [security2:error] [pid 29919:tid 29919] [client 174.138.65.183:43236] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 09:05:28.756335 2026] [security2:error] [pid 29919:tid 29919] [client 174.138.65.183:43236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sponsorzilla.com"] [uri "/.git/config"] [unique_id "aYyMqFTRKDwj6scroAa-YAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 13:29:38
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 08:29:32.557774 2026] [security2:error] [pid 30401:tid 30401] [client 174.138.65.183:58492] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 08:29:32.557774 2026] [security2:error] [pid 30401:tid 30401] [client 174.138.65.183:58492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ustock.app"] [uri "/.git/config"] [unique_id "aYyEPOS5GCRMJhlLtFwJqQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 13:08:05
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 08:07:57.051489 2026] [security2:error] [pid 26288:tid 26288] [client 174.138.65.183:43654] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 08:07:57.051489 2026] [security2:error] [pid 26288:tid 26288] [client 174.138.65.183:43654] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thrivebeyondtoxic.com"] [uri "/.git/config"] [unique_id "aYx_LRt3TkMn5lxgjaLt8QAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-11 13:05:47
UTC ·
(9 months ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-11 12:42:15
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 07:42:10.752386 2026] [security2:error] [pid 30494:tid 30494] [client 174.138.65.183:60278] ...
show more
(mod_security) mod_security (id:210492) triggered by 174.138.65.183 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 11 07:42:10.752386 2026] [security2:error] [pid 30494:tid 30494] [client 174.138.65.183:60278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-burkes.us"] [uri "/.git/config"] [unique_id "aYx5IplCN_YpwEF2bnw4RAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-02-11 12:39:54
UTC ·
(9 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Hacking
Web App Attack