๐ณ๐ฑ
homeshowdomain.nl
2026-06-10 21:59:48
(21 minutes ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
๐ง๐ช
cmbplf
2026-06-09 10:00:20
(1 day ago)
5.577 requests from abuseipdb.com blacklisted IP (1yr4w1d)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 07:49:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:49:21.449592 2026] [security2:error] [pid 5734:tid 5734] [client 34.150.115.95:37396] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "englishmagic.us"] [uri "/.git/config"] [unique_id "aifFgbw3UTb97u_goseWJQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:25:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:25:41.581803 2026] [security2:error] [pid 6957:tid 6957] [client 34.150.115.95:35250] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ifilemuseum.title26.com"] [uri "/.git/config"] [unique_id "aie_9ZAvNvNZNyux0aVoEQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
CBJ
2026-06-09 06:51:18
(1 day ago)
fail2ban: apache-filepath-recon
...
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-09 06:37:15
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:10:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:10:00.374736 2026] [security2:error] [pid 26638:tid 26638] [client 34.150.115.95:35724] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notariacoelemu.tecnoconce.com"] [uri "/.git/config"] [unique_id "aieuOLHpRG8P_3-pO6JjggAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 04:24:57
(1 day ago)
Http Port:80 (http_status:404) - Agent:Opera/9.80 (X11; Linux i686) Presto/2.12.388 Version/12.16
Web App Attack
๐จ๐ญ
4server
2026-06-09 00:24:28
(1 day ago)
[TueJun0902:24:24.4495952026][security2:error][pid2550479:tid2550718][client34.150.115.95:0]ModSecur ...
show more
[TueJun0902:24:24.4495952026][security2:error][pid2550479:tid2550718][client34.150.115.95:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpanel.gsdsagl.ch\"][uri\"/.git/config\"][unique_id\"aiddOBJbermbFQzqD9gu9gAAAQI\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 23:46:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:46:46.530364 2026] [security2:error] [pid 15655:tid 15655] [client 34.150.115.95:54952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sykesclan.com"] [uri "/.env.txt"] [unique_id "aidUZrLkYfiO610LVkjxxAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 23:27:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.115.95 (95.115.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 19:27:04.296602 2026] [security2:error] [pid 13675:tid 13675] [client 34.150.115.95:44920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resume.martinka.org"] [uri "/.env.backup"] [unique_id "aidPyFN4rbWKDpc45b94swAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-06-08 22:29:26
(1 day ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:04:42
(2 days ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐ฆ๐บ
rubixstudios
2026-06-08 21:14:02
(2 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
Anonymous
2026-06-08 19:16:25
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection