๐ณ๐ฑ
homeshowdomain.nl
2026-06-10 22:01:27
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 14:24:09
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:24:02.319283 2026] [security2:error] [pid 14409:tid 14409] [client 34.126.95.166:51438] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cygnetsilks.com"] [uri "/.git/config"] [unique_id "aigiAqdh8Ea29n4wsSRigAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 14:02:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:02:19.698140 2026] [security2:error] [pid 16780:tid 16780] [client 34.126.95.166:50434] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "halblog.hal.dance"] [uri "/.git/config"] [unique_id "aigc647GDCbm9NWKHUG5BwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:46:24
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:46:20.252691 2026] [security2:error] [pid 15794:tid 15794] [client 34.126.95.166:45176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "metaluz.com.sv.mpservice.com.sv"] [uri "/.git/config"] [unique_id "aigZLG1tE85mQiZsBYTxEQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:30:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:30:37.717651 2026] [security2:error] [pid 19387:tid 19387] [client 34.126.95.166:50630] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.title27.itaxcenter.com"] [uri "/.git/config"] [unique_id "aigVfZOtjdPYBuJOzHXlbgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:24:44
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:24:39.625006 2026] [security2:error] [pid 28024:tid 28024] [client 34.126.95.166:38018] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohiohca.com"] [uri "/.git/config"] [unique_id "aigGB_mMpZAbr0AZxWvPtQAAAHc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:16:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:16:33.155888 2026] [security2:error] [pid 16888:tid 16888] [client 34.126.95.166:56254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventiststoday.org"] [uri "/.git/config"] [unique_id "aif2EcLCHwLZI6yfzcbi6wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:41:54
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:41:48.131069 2026] [security2:error] [pid 31476:tid 31517] [client 34.126.95.166:33994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icbc-canada.com"] [uri "/.git/config"] [unique_id "aift7F5OIzlw-dKcbuWdvQAAAMk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:06:46
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:06:40.060796 2026] [security2:error] [pid 7974:tid 7974] [client 34.126.95.166:45754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cas.majesticsolutions.co"] [uri "/.git/config"] [unique_id "aiflsN1XD7ba5yCShI8xUwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-09 09:00:55
(2 days ago)
Try to access /.git/config
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 08:42:07
(2 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.126.95.166 (SG/Singapore/166.95.12 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.126.95.166 (SG/Singapore/166.95.126.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 07:05:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:05:03.402967 2026] [security2:error] [pid 27970:tid 27970] [client 34.126.95.166:40296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.goldsealinspect.weyoungrenovations.com"] [uri "/.git/config"] [unique_id "aie7H_hTeNARSPbTmLLfSQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 01:54:30
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.95.166 (166.95.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:54:26.775381 2026] [security2:error] [pid 19693:tid 19693] [client 34.126.95.166:55256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rdj.us.pappakotis.com"] [uri "/.git/config"] [unique_id "aidyUjZxbPOili8IEgD6BwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
Inartis
2026-06-09 01:32:28
(2 days ago)
34.126.95.166 - - [09/Jun/2026:01:32:27 +0000] "GET /.git/config HTTP/1.1" 302 3733 "-" "Mozilla/5.0 ...
show more
34.126.95.166 - - [09/Jun/2026:01:32:27 +0000] "GET /.git/config HTTP/1.1" 302 3733 "-" "Mozilla/5.0 (X11; Linux i686; rv:12.0) Gecko/20120502 Firefox/12.0 SeaMonkey/2.9.1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-09 01:10:48
(3 days ago)
[TueJun0903:10:41.4359832026][security2:error][pid2116018:tid2116119][client34.126.95.166:0]ModSecur ...
show more
[TueJun0903:10:41.4359832026][security2:error][pid2116018:tid2116119][client34.126.95.166:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.cst-ranghetti.ch\"][uri\"/.git/config\"][unique_id\"aidoEcuKCkXzILuAIsarzAAAAE0\"]
show less
Port Scan
Brute-Force
Web App Attack