๐ณ๐ฑ
homeshowdomain.nl
2026-06-14 22:01:44
(6 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-13.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-13 17:28:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:28:33.430097 2026] [security2:error] [pid 31818:tid 31913] [client 34.101.162.156:59540] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.htpsocal.com.ceol.us"] [uri "/.git/config"] [unique_id "ai2TQbp1PGY2A-baZd_2twAAAMc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 17:09:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 13:09:38.626612 2026] [security2:error] [pid 31357:tid 31357] [client 34.101.162.156:42430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "innatmichaellynns.com"] [uri "/.git/config"] [unique_id "ai2O0iXUMQbqgwYfHYHM9gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 14:14:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 10:14:06.667075 2026] [security2:error] [pid 20611:tid 20611] [client 34.101.162.156:52364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.clipper1970.com.jimgrenier.com"] [uri "/.git/config"] [unique_id "ai1lrkkOT6ABdoJltNgVrQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 12:51:59
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:51:51.826628 2026] [security2:error] [pid 4314:tid 4314] [client 34.101.162.156:40076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chefsuepong.com"] [uri "/.git/config"] [unique_id "ai1SZ7d9nl6Y8QHhHXpYxwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 11:37:45
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:37:39.177343 2026] [security2:error] [pid 10188:tid 10188] [client 34.101.162.156:38332] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isslv.net"] [uri "/.git/config"] [unique_id "ai1BA1fxKfN5ey3ttYsT_QAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-13 11:14:31
(1 week ago)
[SatJun1313:14:27.6750572026][security2:error][pid879124:tid879735][client34.101.162.156:0]ModSecuri ...
show more
[SatJun1313:14:27.6750572026][security2:error][pid879124:tid879735][client34.101.162.156:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.inserzioniticino.ch\"][uri\"/.git/config\"][unique_id\"ai07k_pafSGZz6qk3SvTnwAAAIQ\"]
show less
Hacking
Web App Attack
๐ฌ๐ง
Smish
2026-06-13 10:44:36
(1 week ago)
HONEYPOT HIT --> Fail2ban time=1781347470 log=2026-06-13T11:44:30+01:00 ip=34.101.162.156 host=44net ...
show more
HONEYPOT HIT --> Fail2ban time=1781347470 log=2026-06-13T11:44:30+01:00 ip=34.101.162.156 host=44net.uk method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36" ref="-" rid=be84cf62dfb07735659fb9053071b473
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 06:22:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:22:12.948316 2026] [security2:error] [pid 31291:tid 31291] [client 34.101.162.156:53438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.carlfink.cafink.name"] [uri "/.git/config"] [unique_id "aiz3FMMqBoma1rBSTLU_zAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 05:57:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:57:32.540957 2026] [security2:error] [pid 28530:tid 28530] [client 34.101.162.156:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.kcdusa.com"] [uri "/.git/config"] [unique_id "aizxTGOmssDithjQ-9f1zQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 05:12:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:11:59.085512 2026] [security2:error] [pid 471:tid 471] [client 34.101.162.156:53138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thelotsmokehouse.com"] [uri "/.git/config"] [unique_id "aizmn_rxP1C4c6g1PK0mpQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 04:51:46
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.162.156 (156.162.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 00:51:41.363900 2026] [security2:error] [pid 19946:tid 19946] [client 34.101.162.156:50000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.sifnosgreekcatering.com"] [uri "/.git/config"] [unique_id "aizh3bi5uLiL6nNrQhKx5gAAAE8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-13 04:17:17
(1 week ago)
[SatJun1306:17:12.6240192026][security2:error][pid541775:tid541810][client34.101.162.156:0]ModSecuri ...
show more
[SatJun1306:17:12.6240192026][security2:error][pid541775:tid541810][client34.101.162.156:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.gualandi.mood4apps.com\"][uri\"/.git/config\"][unique_id\"aizZyMfxr-I_JVDreeyAjQAAABg\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-06-13 04:08:46
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐ฌ๐ง
Axel
2026-06-13 03:29:03
(1 week ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection