🇳🇱
homeshowdomain.nl
2026-06-15 21:59:27
(4 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 04:48:14
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:48:08.294238 2026] [security2:error] [pid 29333:tid 29333] [client 34.106.136.18:52002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markaandrews.com"] [uri "/app/.git/config"] [unique_id "ai-ECN1IpfovJrQAIhNBBwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:31:53
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:31:47.382448 2026] [security2:error] [pid 9293:tid 9293] [client 34.106.136.18:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr.org"] [uri "/v1/.git/config"] [unique_id "ai-AM3HwNF8WFd0UUS2auAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:59:25
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.136.18 (18.136.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:59:17.257059 2026] [security2:error] [pid 32045:tid 32045] [client 34.106.136.18:59438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sanesoftware.com"] [uri "/src/.git/config"] [unique_id "ai9qhf862CXZpAP5exbYlQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇳
unph
2026-06-15 02:24:28
(23 hours ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇩🇪
piticu iuli
2026-06-15 02:23:26
(23 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.106.136.18 (US/United States/18.136. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.106.136.18 (US/United States/18.136.106.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
Matthew Ping
2026-06-15 01:15:06
(1 day ago)
ModSecurity rule 949110 triggered on wp2. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇨🇭
leo1305
2026-06-15 00:11:14
(1 day ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
🇳🇱
e.fierstra
2026-06-14 23:15:56
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-14 21:21:03
(1 day ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇳🇱
Savvii
2026-06-14 15:28:18
(1 day ago)
20 attempts against mh-misbehave-ban on mung
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
ivanbiagi7
2026-06-14 15:28:17
(1 day ago)
(localhost/crowdsec) crowdsecurity/http-sensitive-files by ip 34.106.136.18 (US/396982) : 4h ban on ...
show more
(localhost/crowdsec) crowdsecurity/http-sensitive-files by ip 34.106.136.18 (US/396982) : 4h ban on Ip 34.106.136.18
show less
Web App Attack
🇳🇱
Savvii
2026-06-14 12:20:31
(1 day ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
javierin
2026-06-14 10:09:35
(1 day ago)
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:31 +0000] "GET /wp-content/.git/config HTT ...
show more
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:31 +0000] "GET /wp-content/.git/config HTTP/1.1" 404 10017 "-" "P3P Validator"
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:34 +0000] "GET /frontend/.git/config HTTP/1.1" 503 285 "-" "Mozilla/5.0 (SymbianOS/9.1; U; en-us) AppleWebKit/413 (KHTML, like Gecko) Safari/413 es70"
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:34 +0000] "GET /wordpress/.git/config HTTP/1.1" 503 285 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 6_0 like Mac OS X) AppleWebKit/536.26 (KHTML, like Gecko) Version/6.0 Mobile/10A403 Safari/8536.25"
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:34 +0000] "GET /laravel/.git/config HTTP/1.1" 503 285 "-" "Mozilla/5.0 (Linux; Android 9; VKY-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.106.136.18 - centroasturiano.es - - [14/Jun/2026:10:09:34 +0000] "GET /symfony/.git/config HTTP/1.1" 503 285 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWe
...
show less
Hacking
Web App Attack
🇨🇭
Sonics
2026-06-14 07:47:03
(1 day ago)
Automated scanner: .env/.git/phpinfo scan
Web App Attack