๐ณ๐ฑ
homeshowdomain.nl
2026-10-21 21:59:56
(12 minutes ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Web App Attack
SSH
Hacking
Anonymous
2026-10-21 12:10:01
(10 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: DE, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 23:54:55
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:54:52.672542 2026] [security2:error] [pid 21525:tid 21525] [client 34.141.121.218:52852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accordionclub.org"] [uri "/.git/config"] [unique_id "atf_TNaTly0f9zkG8NluLAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 23:33:21
(22 hours ago)
34.141.121.218 - - [20/Oct/2026:18:33:18 -0500] "GET /.env HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windo ...
show more
34.141.121.218 - - [20/Oct/2026:18:33:18 -0500] "GET /.env HTTP/1.1" 301 254 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.94.36
34.141.121.218 - - [20/Oct/2026:18:33:18 -0500] "GET /.env.local HTTP/1.1" 301 260 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.94.36
34.141.121.218 - - [20/Oct/2026:18:33:19 -0500] "GET /.env.production HTTP/1.1" 301 265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.94.36
34.141.121.218 - - [20/Oct/2026:18:33:19 -0500] "GET /.env.staging HTTP/1.1" 301 262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 162.158.94.36
34.141.121.218 - - [20/Oct/2026:18:33:19 -0500] "GET /.env.development HTTP/1.1" 301 266 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) App
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
Savvii
2026-10-20 23:31:25
(22 hours ago)
20 attempts against mh-misbehave-ban on exodus
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 23:26:11
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:26:06.247385 2026] [security2:error] [pid 1258:tid 1258] [client 34.141.121.218:45296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accomplishedmagazine.com.gemexpressions.com"] [uri "/.git/config"] [unique_id "atf4jtjUr3GTwKVS2AjpOwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 23:07:54
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 19:07:47.857651 2026] [security2:error] [pid 7565:tid 7565] [client 34.141.121.218:44140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accommodation-perthairport.com"] [uri "/.git/config"] [unique_id "atf0Q_5QwmLzVvkhfh5MPQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 22:40:02
(23 hours ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 22:04:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.121.218 (218.121.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 18:04:23.171021 2026] [security2:error] [pid 782:tid 782] [client 34.141.121.218:44586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accinternational.net"] [uri "/.git/config"] [unique_id "atflZ_cKA_gfI2agHHg8qwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-10-20 21:03:01
(1 day ago)
2026-10-20 23:00:57 GET /.git/config [301] && 2026-10-20 23:00:57 GET /.env [301] && 2026-10-20 23:0 ...
show more
2026-10-20 23:00:57 GET /.git/config [301] && 2026-10-20 23:00:57 GET /.env [301] && 2026-10-20 23:00:59 GET /.env.bak [301] && 239 more within 20 minutes
show less
Web App Attack
๐ง๐ช
Savvii
2026-10-20 16:28:07
(1 day ago)
25 attempts against mh-misbehave-ban on exodus
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 16:09:48
(1 day ago)
Aggressive web scan
Web App Attack
๐ซ๐ท
masterguru
2026-10-20 14:49:06
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-20 13:29:01
(1 day ago)
15 attempts against mh_ha-mag-login-ban on ec102963
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-20 12:36:19
(1 day ago)
20 attempts against mh_ha-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack