๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:01:50
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ฑ๐ป
garmtech.com
2026-06-09 13:11:03
(2 weeks ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:46:53
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:46:49.805914 2026] [security2:error] [pid 23563:tid 23563] [client 34.101.224.155:47844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morleysales.oceansgift.com"] [uri "/.git/config"] [unique_id "aif9KWGXW_lSVdbJQp6dKwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 11:24:44
(2 weeks ago)
git/env leak probe
Web App Attack
๐จ๐ญ
4server
2026-06-09 11:11:53
(2 weeks ago)
[TueJun0913:11:49.2909742026][security2:error][pid784186:tid784710][client34.101.224.155:0]ModSecuri ...
show more
[TueJun0913:11:49.2909742026][security2:error][pid784186:tid784710][client34.101.224.155:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.bozza.executivekotech.it\"][uri\"/.git/config\"][unique_id\"aif09RUZt7Cwc0UWULbMkwAAAIA\"]
show less
Hacking
Web App Attack
๐ฉ๐ช
4server
2026-06-09 10:03:59
(2 weeks ago)
[TueJun0912:03:57.9151102026][security2:error][pid2733032:tid2733139][client34.101.224.155:0]ModSecu ...
show more
[TueJun0912:03:57.9151102026][security2:error][pid2733032:tid2733139][client34.101.224.155:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.alessandrolucchini.ch\"][uri\"/.git/config\"][unique_id\"aiflDU-VOurMkFHvIBQOvAAAAEk\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:27:58
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:27:51.147214 2026] [security2:error] [pid 23653:tid 23653] [client 34.101.224.155:33666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "1st-advantage-arkansas-real-estate-school.com"] [uri "/.git/config"] [unique_id "aieWR1_yDJCuBXqNy8fnGwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 20:07:14
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:07:09.561231 2026] [security2:error] [pid 17343:tid 17343] [client 34.101.224.155:45798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glidetrubooks.com"] [uri "/.git/config"] [unique_id "aicg7c46BRkdldWZF5NUdQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-08 17:41:57
(2 weeks ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 17:29:49
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 13:29:44.601291 2026] [security2:error] [pid 24095:tid 24153] [client 34.101.224.155:60704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.super-8mm.com.credit-card-cap.com"] [uri "/.git/config"] [unique_id "aib8CIfB4bvhoVfkCfJ2wwAAANM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Inartis
2026-06-08 15:47:21
(2 weeks ago)
34.101.224.155 - - [08/Jun/2026:15:47:20 +0000] "GET /.git/config HTTP/1.1" 404 5143 "-" "Mozilla/5. ...
show more
34.101.224.155 - - [08/Jun/2026:15:47:20 +0000] "GET /.git/config HTTP/1.1" 404 5143 "-" "Mozilla/5.0 (Linux; Android 6.0; LG-D850 Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/53.0.2785.97 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 15:27:25
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:27:19.026025 2026] [security2:error] [pid 9587:tid 9587] [client 34.101.224.155:59902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dylancreates.org"] [uri "/.git/config"] [unique_id "aibfV1JxqJv3hC6CVdnyqwAAAHs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 14:54:37
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:54:31.472290 2026] [security2:error] [pid 23976:tid 23976] [client 34.101.224.155:46206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "outofthebluephotography.com"] [uri "/.git/config"] [unique_id "aibXp4dfEsvbQKCcus-63AAAADI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
island-freaks.com
2026-06-08 13:25:07
(2 weeks ago)
Attack Type: Google Resource Bad Actor attempt on /.git/config | DNS 155.224.101.34.bc.googleusercon ...
show more
Attack Type: Google Resource Bad Actor attempt on /.git/config | DNS 155.224.101.34.bc.googleusercontent.com | Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.62 Safari/537.36
show less
Port Scan
Hacking
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 12:19:23
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.224.155 (155.224.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:19:17.966234 2026] [security2:error] [pid 10581:tid 10581] [client 34.101.224.155:34710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "astariaentertainment.com"] [uri "/.git/config"] [unique_id "aiazRacMBpXlusNTcTxLGQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack