🇳🇱
homeshowdomain.nl
2026-06-15 22:06:23
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇳🇿
Antinson
2026-06-15 05:35:02
UTC ·
(4 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇧🇪
cmbplf
2026-06-15 05:32:32
UTC ·
(4 months ago)
1.434 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 04:47:11
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:47:03.868672 2026] [security2:error] [pid 3839:tid 3839] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:47:03.868672 2026] [security2:error] [pid 3839:tid 3839] [client 34.130.8.63:51478] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "smokeyspb.photos.pages4you.com"] [uri "/app/.git/config"] [unique_id "ai-Dx_5nbqM1zH2DgbEDPgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Petros Stefanakis
2026-06-15 04:37:01
UTC ·
(4 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.130.8.63 (CA/Canada/63.8.130.34.bc.googleusercontent.com)
SQL Injection
🇧🇪
taivas.nl
2026-06-15 04:32:57
UTC ·
(4 months ago)
Many_bad_calls
Web App Attack
Anonymous
2026-06-15 03:50:02
UTC ·
(4 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:43:16
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:43:08.831087 2026] [security2:error] [pid 13672:tid 1367 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:43:08.831087 2026] [security2:error] [pid 13672:tid 13672] [client 34.130.8.63:51084] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.meridianranchdrc.org"] [uri "/backend/.git/config"] [unique_id "ai90zNWW1YVWfnIKMuuIcwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:08:19
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:08:13.299684 2026] [security2:error] [pid 4458:tid 4458] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:08:13.299684 2026] [security2:error] [pid 4458:tid 4458] [client 34.130.8.63:50002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "musicpolitan.com"] [uri "/v2/.git/config"] [unique_id "ai9snb4YDfbiQg5E-ei0MwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-06-15 03:02:08
UTC ·
(4 months ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 02:42:49
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:42:44.928876 2026] [security2:error] [pid 14408:tid 1440 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.8.63 (63.8.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:42:44.928876 2026] [security2:error] [pid 14408:tid 14408] [client 34.130.8.63:35296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ussthresher.com"] [uri "/src/.git/config"] [unique_id "ai9mpJFWnnqGp6vxzSXW8AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-15 02:38:17
UTC ·
(4 months ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
infra-monitor
2026-06-15 02:00:04
UTC ·
(4 months ago)
Automated ban via infra-monitor: mgmt-path-probe, suspicious-probe
Port Scan
Web App Attack
🇩🇪
4server
2026-06-15 01:46:16
UTC ·
(4 months ago)
[MonJun1503:46:10.8130262026][security2:error][pid3235277:tid3235298][client34.130.8.63:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[MonJun1503:46:10.8130262026][security2:error][pid3235277:tid3235298][client34.130.8.63:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"albertiarnaldoluigi.ch\"][uri\"/static/.git/config\"][unique_id\"ai9ZYuE7X5SQZHlB7_152AAAANI\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
✨
2026-06-15 00:59:17
UTC ·
(4 months ago)
Domain : icontraining.co.uk
Rule : config
2026-06-15 00:57:54 W3SVC713 PLESK72 ***hidden-privacy*** GET /app/.git/config - 80 - 34.130.8.63 HTTP/1.1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 YaBrowser/19. ...
show more
Domain : icontraining.co.uk
Rule : config
2026-06-15 00:57:54 W3SVC713 PLESK72 ***hidden-privacy*** GET /app/.git/config - 80 - 34.130.8.63 HTTP/1.1 Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 YaBrowser/19.9.1.64 (beta) Yowser/2.5 Safari/537.36 - - icontraining.co.uk 404 8 0 1455 277 570 - -
show less
Hacking
SQL Injection