🇳🇱
homeshowdomain.nl
2026-06-09 22:02:29
UTC ·
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 09:59:20
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:59:16.540490 2026] [security2:error] [pid 30806:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:59:16.540490 2026] [security2:error] [pid 30806:tid 30806] [client 34.151.138.236:36760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "breathofgodministry.com"] [uri "/.git/config"] [unique_id "aifj9Fe_B6DSAIZFbDI12wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:34:11
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:34:03.379225 2026] [security2:error] [pid 11291:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:34:03.379225 2026] [security2:error] [pid 11291:tid 11291] [client 34.151.138.236:57968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cinesonline.com.visionremota.info"] [uri "/.git/config"] [unique_id "aifeC3ecmh86l8KPYT0k3AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 08:27:54
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:27:46.990285 2026] [security2:error] [pid 19638:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:27:46.990285 2026] [security2:error] [pid 19638:tid 19638] [client 34.151.138.236:43384] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cintiaparral.com"] [uri "/.git/config"] [unique_id "aifOgmR5HaHCE5ukuaTSuAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-09 07:27:14
UTC ·
(5 months ago)
Unauthorized access to webpage admin
Web App Attack
🇨🇦
lakered
2026-06-09 02:17:35
UTC ·
(5 months ago)
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Tech Evidence: JA4H: f5901fd6eff68aa28f473a83e90cda5e, Incomplete-Browser-Profile (Missing: Accept, Accept-Language), Anachronistic-OS (Windows XP), TLS-JA4-Spoofing- ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Tech Evidence: JA4H: f5901fd6eff68aa28f473a83e90cda5e, Incomplete-Browser-Profile (Missing: Accept, Accept-Language), Anachronistic-OS (Windows XP), TLS-JA4-Spoofing-Detected (UA claims Browser but JA4 reports No-HTTP/2: t13d190900), JA4: t13d190900 | UA: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.0.10) Gecko/2009042316 Firefox/3.0.10
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:37:06
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:37:02.171029 2026] [security2:error] [pid 17951:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:37:02.171029 2026] [security2:error] [pid 17951:tid 17951] [client 34.151.138.236:56182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.thepercussionworks.mikedeutsch.com"] [uri "/.git/config"] [unique_id "aiduPvY7FUSCPEeS0ieUfwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-06-09 00:58:17
UTC ·
(5 months ago)
Try to access /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 00:25:30
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:25:24.952314 2026] [security2:error] [pid 345:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.138.236 (236.138.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:25:24.952314 2026] [security2:error] [pid 345:tid 345] [client 34.151.138.236:59522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "graficasbis.com"] [uri "/.git/config"] [unique_id "aidddGUIpnP1MNoxluuKKQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-09 00:09:13
UTC ·
(5 months ago)
Abuse Detected (57)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-08 22:02:51
UTC ·
(5 months ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
🇳🇱
e.fierstra
2026-06-08 19:49:16
UTC ·
(5 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-06-08 19:45:10
UTC ·
(5 months ago)
Aggressive web scan
Web App Attack
🇩🇪
Hazzard
2026-06-08 18:28:51
UTC ·
(5 months ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇬🇧
consul.to
2026-06-08 15:01:33
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack