๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:02:28
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
interbiznw.com
2026-06-09 16:06:22
(1 week ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-09 14:10:34
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐จ๐ญ
4server
2026-06-09 13:43:12
(1 week ago)
[TueJun0915:43:05.1036872026][security2:error][pid1344526:tid1344736][client34.128.122.94:0]ModSecur ...
show more
[TueJun0915:43:05.1036872026][security2:error][pid1344526:tid1344736][client34.128.122.94:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"behindthemoon.ch\"][uri\"/.git/config\"][unique_id\"aigYaXqTbnB4Bo0hfDezowAAAQg\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:14:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:13:59.399597 2026] [security2:error] [pid 25318:tid 25318] [client 34.128.122.94:55258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "goalsnet.net"] [uri "/.git/config"] [unique_id "aif1dyieIvz1Mf4X0rIRPgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:57:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:57:45.321724 2026] [security2:error] [pid 17575:tid 17575] [client 34.128.122.94:48702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.click.startordoro.com"] [uri "/.git/config"] [unique_id "aifxqXE1drh3nY4EuyVfcAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:32:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:32:01.316597 2026] [security2:error] [pid 9587:tid 9587] [client 34.128.122.94:35686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "representacionesthompson.com"] [uri "/.git/config"] [unique_id "aifroZHE_S5aQ15KQox28wAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:47:21
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:47:15.320595 2026] [security2:error] [pid 5377:tid 5377] [client 34.128.122.94:37138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sunshinenv.com"] [uri "/.git/config"] [unique_id "aifhI_QNvAOO_TEOLUfLFQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:50:55
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:50:51.237156 2026] [security2:error] [pid 3206:tid 3311] [client 34.128.122.94:54198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nwnative.us"] [uri "/.git/config"] [unique_id "aifT69tFnSrzL1hPE0q3PgAAAVQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 07:39:36
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.128.122.94 (ID/Indonesia/94.122.12 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.128.122.94 (ID/Indonesia/94.122.128.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 07:31:26
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:31:17.492558 2026] [security2:error] [pid 23783:tid 23783] [client 34.128.122.94:51594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.softwarezz.net"] [uri "/.git/config"] [unique_id "aifBRVDSwgYkyG81RnkKbwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-09 06:20:53
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:36:39
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:36:33.536463 2026] [security2:error] [pid 26585:tid 26585] [client 34.128.122.94:34194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mousseron.com"] [uri "/.git/config"] [unique_id "aieYUWJmiJsl8cq_hyQFSQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:16:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:16:29.260849 2026] [security2:error] [pid 29171:tid 29171] [client 34.128.122.94:46016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.josephalosi.com"] [uri "/.git/config"] [unique_id "aieFjSAY8nFwkH2QyRQKGgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:39:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.122.94 (94.122.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:39:09.553577 2026] [security2:error] [pid 28016:tid 28016] [client 34.128.122.94:60002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lightupaustralia.com.au"] [uri "/.git/config"] [unique_id "aid8zUWaPSao5p3VdkfLHgAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack