🇳🇱
homeshowdomain.nl
2026-01-28 23:00:15
UTC ·
(9 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-27.
Hacking
Web App Attack
SSH
🇬🇧
openstrike.co.uk
2026-01-28 06:13:45
UTC ·
(9 months ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
🇺🇸
octageeks.com
2026-01-28 05:06:48
UTC ·
(9 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-27 22:59:26
UTC ·
(9 months ago)
Auto-ban: >3000 req/min op 2026-01-27
Hacking
Web App Attack
SSH
🇧🇪
cmbplf
2026-01-27 21:38:06
UTC ·
(9 months ago)
725 requests with url.path */.git/config
Brute-Force
Bad Web Bot
🇨🇭
filou812
2026-01-27 20:22:15
UTC ·
(9 months ago)
url tried is "/.git/config"
Web App Attack
🇺🇸
TPI-Abuse
2026-01-27 20:05:58
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 15:05:51.874494 2026] [security2:error] [pid 706429:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 15:05:51.874494 2026] [security2:error] [pid 706429:tid 706429] [client 34.16.241.107:55070] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gwenwaltersartrep.com"] [uri "/.git/config"] [unique_id "aXkan1CUXD2GgyV16rx7vwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-01-27 19:57:18
UTC ·
(9 months ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇨🇿
Countryman
2026-01-27 19:57:18
UTC ·
(9 months ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇨🇿
Countryman
2026-01-27 19:57:18
UTC ·
(9 months ago)
repeated unauthorized connection attempts, host sweep, port scan
Port Scan
🇺🇸
TPI-Abuse
2026-01-27 19:28:08
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 14:28:03.375818 2026] [security2:error] [pid 22667:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 14:28:03.375818 2026] [security2:error] [pid 22667:tid 22667] [client 34.16.241.107:52212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gunningphysio.com"] [uri "/.git/config"] [unique_id "aXkRw5wHs8_mfoCohZhzLQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
gumbysoft
2026-01-27 19:19:30
UTC ·
(9 months ago)
Unauthorized web vulnerability scan (/.env, wordpress, etc.)
Web App Attack
🇺🇸
TPI-Abuse
2026-01-27 19:09:59
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 14:09:56.094255 2026] [security2:error] [pid 7916:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 14:09:56.094255 2026] [security2:error] [pid 7916:tid 7916] [client 34.16.241.107:44970] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guitarsouth.com"] [uri "/.git/config"] [unique_id "aXkNhPWy195DINBYYKckZQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-01-27 18:51:52
UTC ·
(9 months ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-01-27 18:39:23
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 13:39:19.970277 2026] [security2:error] [pid 16852:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.16.241.107 (107.241.16.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jan 27 13:39:19.970277 2026] [security2:error] [pid 16852:tid 16852] [client 34.16.241.107:44684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "guardiancns.com"] [uri "/.git/config"] [unique_id "aXkGV9muWItICxHaKI7LQgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack