๐ณ๐ฑ
homeshowdomain.nl
2026-06-15 22:03:15
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-14 07:37:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:36:58.082102 2026] [security2:error] [pid 32435:tid 32464] [client 34.151.182.165:60860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stone-doyle.com"] [uri "/static/.git/config"] [unique_id "ai5aGr_WCQDYy8hVvBTd9AAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 06:15:28
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 02:15:21.413438 2026] [security2:error] [pid 17662:tid 17662] [client 34.151.182.165:45544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sentinelonfifth.aarce.me"] [uri "/code/.git/config"] [unique_id "ai5G-WGZWfyV6mwzJpp9XwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 05:17:34
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:17:27.843931 2026] [security2:error] [pid 5513:tid 5513] [client 34.151.182.165:46230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medcoarabia.com"] [uri "/backend/.git/config"] [unique_id "ai45Z4cE8fYkYAWt06s91gAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-14 04:34:28
(4 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
๐ซ๐ท
masterguru
2026-06-14 04:32:15
(4 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 03:50:29
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:50:21.573909 2026] [security2:error] [pid 10616:tid 10616] [client 34.151.182.165:52810] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "americanlegion935.com"] [uri "/v1/.git/config"] [unique_id "ai4k_QTyJgSZ2DaqsBwZ2QAAAHo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 02:59:22
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.151.182.165 (165.182.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 22:59:17.286307 2026] [security2:error] [pid 20262:tid 20278] [client 34.151.182.165:52302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gardenclub.ramona.town"] [uri "/.git/config"] [unique_id "ai4ZBc1tF7q48v6KfmcXwAAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Origon
2026-06-14 02:17:11
(5 days ago)
http-sensitive-files - IP: 34.151.182.165 - time="2026-06-14T04:17:10+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.151.182.165 - time="2026-06-14T04:17:10+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.151.182.165 (AU/396982) : 4h ban on Ip 34.151.182.165" module=db
show less
Web App Attack
๐บ๐ธ
mnsf
2026-06-14 02:06:24
(5 days ago)
Too many Status 40X (12)
Scanning/Probing (30)
Brute-Force
Web App Attack
๐ณ๐ฑ
Brict IT
2026-06-14 01:48:52
(5 days ago)
Bad Web Bot
Web App Attack
Anonymous
2026-06-14 01:04:02
(5 days ago)
34.151.182.165 - - [14/Jun/2026:03:04:02 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 ...
show more
34.151.182.165 - - [14/Jun/2026:03:04:02 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.102 Safari/537.36 Vivaldi/2.0.1309.3"
34.151.182.165 - - [14/Jun/2026:03:04:02 +0200] "GET /app/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
34.151.182.165 - - [14/Jun/2026:03:04:02 +0200] "GET /src/.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3191.0 Safari/537.36"
show less
Web App Attack
๐ซ๐ฎ
SamJUK
2026-06-14 00:34:10
(5 days ago)
Multiple WAF Violations
...
Bad Web Bot
Web App Attack
Anonymous
2026-06-14 00:34:00
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.151.182.165 (AU/Australia/165.182.15 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.151.182.165 (AU/Australia/165.182.151.34.bc.googleusercontent.com)
show less
SQL Injection
๐จ๐ฟ
rawnullbyte
2026-06-13 23:33:09
(5 days ago)
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: GIT_REPOSITORY_EXPOSURE ๐ฃ๏ธ Path: /.git/config ๐ค Atta ...
show more
๐จ Honeypot triggered! ๐ฅ๏ธ System: NPot ๐ฏ Target: GIT_REPOSITORY_EXPOSURE ๐ฃ๏ธ Path: /.git/config ๐ค Attacker IP: 34.151.182.165 โฐ Time: 2026-06-13 23:33:09 ๐ก User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/48.0.2564.116 UBrowser/5.6.13705.206 Safari/537.36
show less
Web App Attack