๐ณ๐ฑ
homeshowdomain.nl
2026-06-14 22:00:29
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-13.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-06-13 22:07:01
(5 days ago)
Auto-ban: >3000 req/min op 2026-06-13
Web App Attack
SSH
Hacking
๐ฉ๐ช
4server
2026-06-13 16:08:46
(5 days ago)
[SatJun1318:08:40.1521282026][security2:error][pid1347357:tid1347417][client34.128.80.12:0]ModSecuri ...
show more
[SatJun1318:08:40.1521282026][security2:error][pid1347357:tid1347417][client34.128.80.12:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"nuovosito.gruppobalu.com\"][uri\"/.git/config\"][unique_id\"ai2AiJg1HmxHroG5Rfhh0wAAAFU\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 15:19:05
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 11:19:00.913829 2026] [security2:error] [pid 31746:tid 31746] [client 34.128.80.12:55792] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oficial.gisur.com"] [uri "/.git/config"] [unique_id "ai105NIxFCkiuHAvJtIp2wAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 12:54:02
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:53:54.098331 2026] [security2:error] [pid 22996:tid 22996] [client 34.128.80.12:36594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jpsa.org"] [uri "/.git/config"] [unique_id "ai1S4iwQDsOW0_l_e8dd8gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 12:15:24
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 08:15:19.623758 2026] [security2:error] [pid 23691:tid 23691] [client 34.128.80.12:40610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "natasways.worldchat.global"] [uri "/.git/config"] [unique_id "ai1J107QEG35T4Swr0NT2AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 11:37:41
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 07:37:34.834893 2026] [security2:error] [pid 4755:tid 4755] [client 34.128.80.12:54450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.glamorgirl.net"] [uri "/.git/config"] [unique_id "ai1A_v4saMaLyrMyOPxzkgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 09:53:34
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 05:53:30.036084 2026] [security2:error] [pid 4710:tid 4710] [client 34.128.80.12:34560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.newschristianview.afjm.net"] [uri "/.git/config"] [unique_id "ai0omjhl4twDccShlZ-5XwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-13 09:06:35
(6 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 08:31:16
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:31:10.562340 2026] [security2:error] [pid 3741:tid 3741] [client 34.128.80.12:33766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.vid.com"] [uri "/.git/config"] [unique_id "ai0VTk7cnlEINScUBtYqWwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 07:29:44
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 03:29:36.466655 2026] [security2:error] [pid 23550:tid 23550] [client 34.128.80.12:43500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.automationmp.com.cgautomatizacion.com"] [uri "/.git/config"] [unique_id "ai0G4AFDNDX7ltrIDRdTqgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-13 07:24:43
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ง๐ช
voormedia
2026-06-13 06:23:50
(6 days ago)
Accessed trap at '/.git/config'
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-13 05:48:50
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.128.80.12 (12.80.128.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:48:43.688294 2026] [security2:error] [pid 17481:tid 17481] [client 34.128.80.12:60808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "seacorre.seacorre.com"] [uri "/.git/config"] [unique_id "aizvO-nty-sOJVyUTqlRFwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-13 05:06:17
(6 days ago)
Abuse Detected (2)
Brute-Force
Web App Attack