🇨🇭
TheCoon
2026-11-08 11:00:37
UTC ·
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-24 16:22:52
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-23 06:27:50
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-21 06:50:12
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇮🇳
evicky2002
2026-05-20 04:30:47
UTC ·
(5 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2026-05-09 21:59:32
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-08.
Web App Attack
SSH
Hacking
🇩🇪
Ba-Yu
2026-05-08 16:20:55
UTC ·
(6 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇨🇭
TheCoon
2026-05-08 16:15:02
UTC ·
(6 months ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇩🇪
big-cloud.nl
2026-05-08 05:56:21
UTC ·
(6 months ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 05:26:46
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:26:41.141314 2026] [security2:error] [pid 27045:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 01:26:41.141314 2026] [security2:error] [pid 27045:tid 27070] [client 34.100.211.11:53866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lex.nederbragt.net"] [uri "/.git/config"] [unique_id "af10Eb1WrNsOav_zs1-CCAAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-05-08 05:26:31
UTC ·
(6 months ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-05-08 04:24:39
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 00:24:36.431136 2026] [security2:error] [pid 3448:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 08 00:24:36.431136 2026] [security2:error] [pid 3448:tid 3448] [client 34.100.211.11:48194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "greensandbeans.us"] [uri "/.git/config"] [unique_id "af1lhCYKRe-bBD_b0MNIJAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-05-08 03:18:44
UTC ·
(6 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-08 02:54:32
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:54:27.762854 2026] [security2:error] [pid 6796:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.211.11 (11.211.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 07 22:54:27.762854 2026] [security2:error] [pid 6796:tid 6796] [client 34.100.211.11:34372] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jeffersonshaw.braunhausmedia.com"] [uri "/.git/config"] [unique_id "af1QYwDF4lYeKOqVySpZgAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-05-08 02:09:16
UTC ·
(6 months ago)
Domain : exmoor-walking-holidays.co.uk
Rule : config
2026-05-08 02:07:35 ***hidden-privacy*** GET /.git/config - 443 - 34.100.211.11 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Saf ...
show more
Domain : exmoor-walking-holidays.co.uk
Rule : config
2026-05-08 02:07:35 ***hidden-privacy*** GET /.git/config - 443 - 34.100.211.11 HTTP/1.1 Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/32.0.1664.3 Safari/537.36 - exmoor-walking-holidays.co.uk 404 8 0 1484 263 1261 - -
show less
Hacking
SQL Injection