Anonymous
2026-06-18 09:08:18
UTC ·
(4 months ago)
Trying to access config files
Web App Attack
Anonymous
2026-06-16 13:07:52
UTC ·
(4 months ago)
Trying to access config files
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-15 21:59:24
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇳🇱
e.fierstra
2026-06-15 03:32:00
UTC ·
(4 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-06-15 02:57:39
UTC ·
(4 months ago)
Scanning for web/db/file exploits on verpakexpert.crossworx.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:25:39
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:25:32.796111 2026] [security2:error] [pid 19078:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:25:32.796111 2026] [security2:error] [pid 19078:tid 19078] [client 34.130.80.196:44152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "saynotoofland.org"] [uri "/app/.git/config"] [unique_id "ai9inGseaYx6_WySzBXNBwAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-06-15 02:25:14
UTC ·
(4 months ago)
http-sensitive-files - IP: 34.130.80.196 - time="2026-06-15T04:25:13+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.130.80.196 (CA/396982) : 4h ban on Ip 34.130.80.196" ...
show more
http-sensitive-files - IP: 34.130.80.196 - time="2026-06-15T04:25:13+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.130.80.196 (CA/396982) : 4h ban on Ip 34.130.80.196" module=db
show less
Web App Attack
🇬🇧
Axel
2026-06-15 00:54:02
UTC ·
(4 months ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /public/.git/config Server: UK-01
Web App Attack
Hacking
SQL Injection
🇧🇪
cmbplf
2026-06-15 00:43:54
UTC ·
(4 months ago)
1.497 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-15 00:19:49
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:19:43.947543 2026] [security2:error] [pid 20864:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:19:43.947543 2026] [security2:error] [pid 20864:tid 20864] [client 34.130.80.196:51216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ubuciko.com"] [uri "/.git/config"] [unique_id "ai9FH302bRSR2OAwwOwSTQAAADA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:36:38
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:36:30.525272 2026] [security2:error] [pid 14578:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.130.80.196 (196.80.130.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:36:30.525272 2026] [security2:error] [pid 14578:tid 14578] [client 34.130.80.196:58772] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "haroparquet.com"] [uri "/.git/config"] [unique_id "ai86_knmkizWyqNyPRhqzgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-06-14 22:51:54
UTC ·
(4 months ago)
(modsecurity) srv104 ModSecurity 34.130.80.196 (CA/Canada/196.80.130.34.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇰🇷
doll.gl
2026-06-14 22:33:52
UTC ·
(4 months ago)
CrowdSec: Ip 34.130.80.196 performed 'crowdsecurity/http-sensitive-files' (5 events over 40.574628ms) at 2026-06-14 22:33:50.675214068 +0000 UTC (scenario: crowdsecurity/http-sensitive-files)
Port Scan
Web App Attack
Anonymous
2026-06-14 22:06:16
UTC ·
(4 months ago)
Trying to access config files
Web App Attack
🇪🇸
pipeline.es
2026-06-14 20:53:42
UTC ·
(4 months ago)
Web scanning / probing for vulnerable paths | URL: /laravel/.git/config | Evidence: vigemac.com 34.130.80.196 - - [14/Jun/2026:22:51:43 +0200] \"GET /laravel/.git/config HTTP/1.1\" 404 20207 \"-\" \"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537 ...
show more
Web scanning / probing for vulnerable paths | URL: /laravel/.git/config | Evidence: vigemac.com 34.130.80.196 - - [14/Jun/2026:22:51:43 +0200] \"GET /laravel/.git/config HTTP/1.1\" 404 20207 \"-\" \"Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36\" GEOIP_COUNTRY_CODE=CA | ASN: GOOGLE-CLOUD-PLATFORM | Country: CA
show less
Port Scan
Web App Attack