๐ณ๐ฑ
homeshowdomain.nl
2026-10-01 21:59:18
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-30.
show less
Web App Attack
SSH
Hacking
๐ต๐ซ
www.gregorymariani.com
2026-09-30 04:24:12
(2 weeks ago)
Web App Attack
Anonymous
2026-09-28 20:45:51
(2 weeks ago)
Banned by Fail2Ban on server
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 19:37:45
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:37:42.758310 2026] [security2:error] [pid 6315:tid 6315] [client 34.126.113.80:35288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teamsterslmcc.com"] [uri "/.git/config"] [unique_id "arlwhr0o0HaGwzI9TyZ-NQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 19:18:22
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 15:18:17.165715 2026] [security2:error] [pid 21831:tid 21831] [client 34.126.113.80:39380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.teamrealduck.com"] [uri "/.git/config"] [unique_id "arlr-aa_5mj7KUb_81A74wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-27 06:58:37
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.definitelynotahoneypot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 04:50:17
(2 weeks ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ซ๐ท
COMAITE
2026-09-26 21:18:35
(2 weeks ago)
Suspicious URL access.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 19:56:09
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:56:03.705091 2026] [security2:error] [pid 12228:tid 12228] [client 34.126.113.80:49466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "canebrakes.com"] [uri "/.git/config"] [unique_id "argjU2HLCTjczqIuT7vPWAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 15:08:29
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.113.80 (80.113.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 11:08:24.203010 2026] [security2:error] [pid 13710:tid 13710] [client 34.126.113.80:45906] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.onlinesoldier.com"] [uri "/.git/config"] [unique_id "arff6NIy8iCBwg-2xvd7AAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-09-26 08:40:04
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: api.budyn.top | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
LotPhantom
2026-09-26 07:49:12
(2 weeks ago)
2026/09/26 07:49:12 [error] 2721244#2721244: *107829 access forbidden by rule, client: 34.126.113.80 ...
show more
2026/09/26 07:49:12 [error] 2721244#2721244: *107829 access forbidden by rule, client: 34.126.113.80, server: api.bridginggaps.tech, request: "GET /.git/config HTTP/1.1", host: "api.bridginggaps.tech"
...
show less
Web App Attack
๐ฌ๐ง
cg-design.co.uk
2026-09-25 16:27:15
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.126.113.80 (SG/Singapore/80.113.126. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.126.113.80 (SG/Singapore/80.113.126.34.bc.googleusercontent.com)
show less
SQL Injection
๐ง๐ช
madeit
2026-09-25 04:17:05
(3 weeks ago)
Web App Attack
๐ณ๐ฑ
maxxsense
2026-09-24 13:09:15
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.126.113.80 (SG/Singapore/80.113.126. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.126.113.80 (SG/Singapore/80.113.126.34.bc.googleusercontent.com)
show less
SQL Injection