🇳🇱
homeshowdomain.nl
2026-06-15 22:03:52
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-06-15 17:41:47
(2 days ago)
1.171 requests with url.path */.git/config
1.171 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-06-15 17:31:53
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
2026-06-15 14:45:54
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.162.97.12 (US/United States/12.97.16 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.162.97.12 (US/United States/12.97.162.34.bc.googleusercontent.com)
show less
SQL Injection
🇺🇸
TPI-Abuse
2026-06-15 08:12:19
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:949110) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:12:13.534928 2026] [security2:error] [pid 10513:tid 10513] [client 34.162.97.12:43458] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "psqeng.com"] [uri "/app/.git/config"] [unique_id "ai-z3T_yA3zS77isOlQPpwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:18:26
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:18:21.910576 2026] [security2:error] [pid 1403:tid 1419] [client 34.162.97.12:39230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clinicadelparabrisas.com"] [uri "/.git/config"] [unique_id "ai-ZLUt0SknuUyNMDXczmwAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
aranguren.org
2026-06-15 06:06:12
(2 days ago)
34.162.97.12 - - [15/Jun/2026:16:06:12 +1000] "GET /symfony/.git/config HTTP/1.1" 404 999 "-" "Mozil ...
show more
34.162.97.12 - - [15/Jun/2026:16:06:12 +1000] "GET /symfony/.git/config HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.89 Vivaldi/1.0.94.2 Safari/537.36"
34.162.97.12 - - [15/Jun/2026:16:06:12 +1000] "GET /build/.git/config HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Windows; U; Windows NT 6.0 x64; en-US; rv:1.9pre) Gecko/2008072421 Minefield/3.0.2pre"
34.162.97.12 - - [15/Jun/2026:16:06:12 +1000] "GET /src/.git/config HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Linux; Android 9; G8341) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.162.97.12 - - [15/Jun/2026:16:06:12 +1000] "GET /html/.git/config HTTP/1.1" 404 999 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A5010 Build/PKQ1.180716.001; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/66.0.3359.126 MQQBrowser/6.2 TBS/044807 Mobile Safari/537.36 MMWEBID/1699 MicroMessenger/7.0.6.1460(0x27000634) Process/tools NetType/4G Language/zh_CN"
...
show less
Bad Web Bot
🇳🇱
debestelapp
2026-06-15 06:05:10
(2 days ago)
Web App Attack
🇳🇿
Antinson
2026-06-15 05:55:40
(2 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇱
Site.eu
2026-06-15 04:36:24
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇧🇪
taivas.nl
2026-06-15 04:33:14
(2 days ago)
Many_bad_calls
Web App Attack
🇷🇺
DZBOT
2026-06-15 04:14:33
(2 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:45:27
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.162.97.12 (12.97.162.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:45:23.995402 2026] [security2:error] [pid 15473:tid 15473] [client 34.162.97.12:38106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hiddentcgcards.com"] [uri "/.git/config"] [unique_id "ai9LI4xFyqFKjn7aB0S0jgAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-14 23:59:19
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
2026-06-14 23:36:13
(3 days ago)
Bot / seems abusive / Apache connections: 28
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack