🇳🇱
homeshowdomain.nl
2026-06-15 21:59:33
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇩🇪
SCHAPPY
2026-06-15 03:02:32
(1 week ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
🇩🇪
paissangroup
2026-06-15 02:43:17
(1 week ago)
Multiple WAF Violations
Web App Attack
🇩🇪
IVski
2026-06-15 02:18:39
(1 week ago)
IVski WAF | Sensitive file probe detected - looking for .git
Port Scan
Brute-Force
Web App Attack
🇩🇪
big-cloud.nl
2026-06-15 01:36:53
(1 week ago)
Try to access /frontend/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:22:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:22:54.472049 2026] [security2:error] [pid 4108:tid 4108] [client 34.106.207.224:36094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.34.gisur.com"] [uri "/app/.git/config"] [unique_id "ai9F3nCmCqTagUhUNG-2NAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-15 00:18:29
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
✨
2026-06-15 00:03:14
(1 week ago)
Domain : goonmytrip.com
Rule : config
2026-06-15 00:00:56 ***hidden-privacy*** GET /v1/.git/config - ...
show more
Domain : goonmytrip.com
Rule : config
2026-06-15 00:00:56 ***hidden-privacy*** GET /v1/.git/config - 443 - 34.106.207.224 HTTP/1.1 Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:25.0) Gecko/20100101 Firefox/29.0 - www.goonmytrip.com 404 8 0 1306 214 156 - -
show less
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-06-15 00:01:23
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:01:15.116973 2026] [security2:error] [pid 20751:tid 20751] [client 34.106.207.224:49968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wildemar.rcto.us"] [uri "/src/.git/config"] [unique_id "ai9AywFrGL1K-WY06Vb9gwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-06-14 23:49:43
(1 week ago)
http-sensitive-files - IP: 34.106.207.224 - time="2026-06-15T01:49:42+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.106.207.224 - time="2026-06-15T01:49:42+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.106.207.224 (US/396982) : 4h ban on Ip 34.106.207.224" module=db
show less
Web App Attack
🇷🇴
iulianh
2026-06-14 22:37:32
(1 week ago)
*
Brute-Force
SSH
🇳🇱
wlt-blocker
2026-06-14 21:00:15
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 20:52:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.207.224 (224.207.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 16:52:45.752926 2026] [security2:error] [pid 19761:tid 19761] [client 34.106.207.224:46226] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chikusa.net"] [uri "/v2/.git/config"] [unique_id "ai8UnftfX779BgUv-IDR5QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-14 10:55:19
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇫🇷
masterguru
2026-06-14 10:16:53
(1 week ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack