🇳🇱
homeshowdomain.nl
2026-03-07 23:02:15
UTC ·
(8 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-03-06.
Web App Attack
SSH
Hacking
Anonymous
2026-03-07 04:31:58
UTC ·
(8 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-03-07 00:14:31
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 19:14:24.390516 2026] [security2:error] [pid 7110:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 19:14:24.390516 2026] [security2:error] [pid 7110:tid 7110] [client 34.136.167.57:47080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "startordoro.com"] [uri "/.git/config"] [unique_id "aatt4A2D72aYy4ysmpZBjQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Ba-Yu
2026-03-06 23:49:49
UTC ·
(8 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
Starburst SysOp Team
2026-03-06 23:47:55
UTC ·
(8 months ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-03-06 23:41:16
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 18:41:12.765189 2026] [security2:error] [pid 8165:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 18:41:12.765189 2026] [security2:error] [pid 8165:tid 8165] [client 34.136.167.57:60448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stantontownship.org"] [uri "/.git/config"] [unique_id "aatmGDBYeSYJlpmankvaOgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-03-06 23:40:23
UTC ·
(8 months ago)
Probing to gain illegal access
Web App Attack
Anonymous
2026-03-06 23:33:41
UTC ·
(8 months ago)
Web App Attack
🇳🇱
homeshowdomain.nl
2026-03-06 22:59:15
UTC ·
(8 months ago)
Auto-ban: >3000 req/min op 2026-03-06
Web App Attack
SSH
Hacking
🇳🇿
Antinson
2026-03-06 22:19:32
UTC ·
(8 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇦🇺
2000cn.com.au
2026-03-06 22:06:37
UTC ·
(8 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-03-06 20:08:21
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 15:08:16.267151 2026] [security2:error] [pid 23049:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 15:08:16.267151 2026] [security2:error] [pid 23049:tid 23049] [client 34.136.167.57:47686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toxicwater.helpkccare.org"] [uri "/.git/config"] [unique_id "aas0MFq7ai4mkMkPR8U14gAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-03-06 19:52:30
UTC ·
(8 months ago)
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 14:52:25.181511 2026] [security2:error] [pid 6331:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.136.167.57 (57.167.136.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Mar 06 14:52:25.181511 2026] [security2:error] [pid 6331:tid 6331] [client 34.136.167.57:51276] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tourissue.com"] [uri "/.git/config"] [unique_id "aasweS_vS8k0FHJEYKUyFwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-03-06 19:52:22
UTC ·
(8 months ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
big-cloud.nl
2026-03-06 19:49:06
UTC ·
(8 months ago)
Try to access /.git/config
Web App Attack