🇺🇸
TPI-Abuse
2026-07-06 22:04:21
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 18:04:15.740212 2026] [security2:error] [pid 30913:tid 30913] [client 31.58.51.184:41536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pedigree.tucek.org"] [uri "/.git/HEAD"] [unique_id "akwmX75s3wMm4-4FYN60gAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-06 22:00:14
(3 hours ago)
Auto-ban: >3000 req/min op 2026-07-06
Web App Attack
SSH
Hacking
🇩🇪
IVski
2026-07-06 21:57:53
(3 hours ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 21:14:33
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 17:14:26.263708 2026] [security2:error] [pid 14648:tid 14648] [client 31.58.51.184:57558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rachel-heiko.com.owenmail.com"] [uri "/.git/HEAD"] [unique_id "akwasvQGGYtKmxgz8A9dBAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-06 21:00:50
(4 hours ago)
31.58.51.184 - - [06/Jul/2026:23:00:50 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 ( ...
show more
31.58.51.184 - - [06/Jul/2026:23:00:50 +0200] "GET /.git/config HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_7_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 19:19:17
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 15:19:10.249308 2026] [security2:error] [pid 27812:tid 27812] [client 31.58.51.184:59834] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "propertygalleria.vittariadesign.com"] [uri "/.env"] [unique_id "akv_rs-_k2qTBx7H9Nj8KAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-07-06 19:17:25
(6 hours ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure. Observed by 1 sensor(s); 2 hits.
show less
Web App Attack
🇦🇺
2000cn.com.au
2026-07-06 19:02:37
(6 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-06 18:24:51
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 14:24:45.772970 2026] [security2:error] [pid 14369:tid 14369] [client 31.58.51.184:52698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "powerbook.micahgartman.com"] [uri "/backend/.env"] [unique_id "akvy7VU1vDfxDyWohrE05wAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-07-06 17:51:16
(7 hours ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
2026-07-06 15:19:30
(10 hours ago)
31.58.51.184 - - [06/Jul/2026:17:19:23 +0200] "GET /.git/HEAD HTTP/1.1" 404 48089 "-" "Mozilla/5.0 ( ...
show more
31.58.51.184 - - [06/Jul/2026:17:19:23 +0200] "GET /.git/HEAD HTTP/1.1" 404 48089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
31.58.51.184 - - [06/Jul/2026:17:19:23 +0200] "GET /.git/HEAD HTTP/1.1" 404 10970 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
31.58.51.184 - - [06/Jul/2026:17:19:26 +0200] "GET /.env HTTP/1.1" 404 48089 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
31.58.51.184 - - [06/Jul/2026:17:19:26 +0200] "GET /.env HTTP/1.1" 404 10970 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
31.58.51.184 - - [06/Jul/2026:17:19:28 +0200] "GET /env HTTP/1.1" 404 10970 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15.7; rv:149.0) Gecko/20100101 Firefox/149.0"
31.58.51.184 - - [06/Jul/2026:17:19:27 +0200] "GET /env HTTP/1.1" 404 48089 "-" "Mozilla
...
show less
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-07-06 14:05:22
(11 hours ago)
Abuse Detected (11)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 13:43:22
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 09:43:16.135889 2026] [security2:error] [pid 9031:tid 9031] [client 31.58.51.184:34192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramabahama.net"] [uri "/.git/HEAD"] [unique_id "akuw9JZQWb5zAsYUYslnIAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-06 13:22:33
(12 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-07-06 12:51:14
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 31.58.51.184 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 06 08:51:11.863579 2026] [security2:error] [pid 10172:tid 10172] [client 31.58.51.184:40996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portfolio.hotelausland.com"] [uri "/api/.env"] [unique_id "akukvx1L6BjgaGHEvWdv2AAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack