🇳🇱
homeshowdomain.nl
2026-07-31 21:59:50
(16 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-30.
show less
Web App Attack
SSH
Hacking
🇮🇹
IRT@Unisi
2026-07-31 21:16:23
(17 hours ago)
Multiple web server 400 error codes from same source ip.
Bad Web Bot
🇧🇷
TM
2026-07-31 15:20:00
(23 hours ago)
get /.git/config
Web App Attack
🇨🇦
polycoda
2026-07-31 02:28:27
(1 day ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 22:17:14
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 18:17:07.047741 2026] [security2:error] [pid 2812794:tid 2812794] [client 34.10.41.220:42216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ssion.com"] [uri "/.git/config"] [unique_id "amvNY6xSu2p-DEriUcXqNgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-07-30 22:07:58
(1 day ago)
34.10.41.220 - - [31/Jul/2026:01:07:57 +0300] "GET /.git/config HTTP/1.1" 404 4687 "-" "-"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-07-30 20:46:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:46:53.551025 2026] [security2:error] [pid 1120889:tid 1120889] [client 34.10.41.220:53694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slimlaw.com"] [uri "/.git/config"] [unique_id "amu4PaIb9uToe4sDoDk4sQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
slay3r9903
2026-07-30 20:27:50
(1 day ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-07-30 20:19:34
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 16:19:27.233388 2026] [security2:error] [pid 1080864:tid 1080864] [client 34.10.41.220:53462] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "slapai.org"] [uri "/.git/config"] [unique_id "amuxzxYvnMupZiegp0cduwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-07-30 20:05:12
(1 day ago)
Abuse Detected (14)
Brute-Force
Web App Attack
🇸🇪
SkyDancer
2026-07-30 20:03:38
(1 day ago)
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blo ...
show more
Multiple intrusion attempts via http/https on known vulnerable url offsets. Attack automatically blocked by SkyDancer Ai(web-X).
show less
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-07-30 19:55:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.41.220 (220.41.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 30 15:55:18.243329 2026] [security2:error] [pid 2028167:tid 2028167] [client 34.10.41.220:51374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skyesongtollers.com"] [uri "/.git/config"] [unique_id "amusJv7DkuXoRCj4-slo7wAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
skoczo
2026-07-30 19:33:19
(1 day ago)
Honeytoken tripped (detected by https://github.com/skoczo/repgate): /.git/config
Web App Attack
🇧🇪
cmbplf
2026-07-30 19:31:43
(1 day ago)
708 requests with url.path */.git/config
708 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇨🇭
TheCoon
2026-07-30 19:30:01
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking