🇳🇱
homeshowdomain.nl
2026-06-09 22:01:39
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 16:01:41
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:01:38.518006 2026] [security2:error] [pid 1524:tid 1524] [client 34.101.106.93:50482] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.statebeach.org.mrcd.org"] [uri "/.git/config"] [unique_id "aig44jzwPwMjnHycb9JvugAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 14:30:31
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:30:15.925709 2026] [security2:error] [pid 19758:tid 19758] [client 34.101.106.93:54538] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rungunfilm.marshallcurry.com"] [uri "/.git/config"] [unique_id "aigjd_A8knjMYx7ipPaE3wAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-09 14:01:37
(1 week ago)
[TueJun0916:01:31.9268942026][security2:error][pid3027692:tid3027809][client34.101.106.93:0]ModSecur ...
show more
[TueJun0916:01:31.9268942026][security2:error][pid3027692:tid3027809][client34.101.106.93:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"safeoncloud.ch\"][uri\"/.git/config\"][unique_id\"aigcu09o8YRr5ESBhtJAbgAAARU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇬🇧
Axel
2026-06-09 12:06:02
(1 week ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-06-09 11:40:48
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:40:45.267218 2026] [security2:error] [pid 7918:tid 7942] [client 34.101.106.93:48416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "certifiedfinancialmanager.org"] [uri "/.git/config"] [unique_id "aif7vXBY6oriXIcSVDtQswAAAdA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-06-09 10:39:07
(1 week ago)
⌨️ Probes for /.git/config everywhere
Hacking
Web App Attack
🇨🇦
polycoda
2026-06-09 09:53:20
(1 week ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇳🇱
MM-bot
2026-06-09 05:36:35
(1 week ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-06-09 07:36:35 UTC+2)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-09 04:35:18
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:35:14.691411 2026] [security2:error] [pid 31764:tid 31764] [client 34.101.106.93:38194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emailaegis.axiomemail.net"] [uri "/.git/config"] [unique_id "aieYAk1wkadr5TM6idUShwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:53:37
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:53:33.653992 2026] [security2:error] [pid 30644:tid 30644] [client 34.101.106.93:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.caspina.com"] [uri "/.git/config"] [unique_id "aieOPcWn63UW4GEQtKiTTwAAAG0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:49:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:49:29.702129 2026] [security2:error] [pid 26062:tid 26062] [client 34.101.106.93:46412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "professorjunk.com"] [uri "/.git/config"] [unique_id "aid_Oew7FMzFfGI6xDrwawAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 00:51:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:51:00.326058 2026] [security2:error] [pid 23866:tid 23866] [client 34.101.106.93:53174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.crystaljohns.com.my-spec.com"] [uri "/.git/config"] [unique_id "aidjdE4M42g_MgPpltzkigAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 20:41:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:41:09.064199 2026] [security2:error] [pid 23760:tid 23760] [client 34.101.106.93:55336] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bowdenslandingcom.draindoctor.us"] [uri "/.git/config"] [unique_id "aico5TPnTjAimiCqwnHZWAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 16:40:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.106.93 (93.106.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 12:40:00.773013 2026] [security2:error] [pid 30815:tid 30815] [client 34.101.106.93:49030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saynotoofland.org"] [uri "/.git/config"] [unique_id "aibwYLq_j9ycwvGh-BFEKAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack