🇳🇱
homeshowdomain.nl
2026-06-15 22:00:53
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇬🇧
thetomtaylor.co.uk
2026-06-15 09:07:02
UTC ·
(4 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Artelis
2026-06-15 06:13:52
UTC ·
(4 months ago)
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /shop/.git/config HTTP/1.1" 404 1775 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36"
34.180.8.153 - - [15/Jun/2026:06:13:51 +0 ...
show more
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /shop/.git/config HTTP/1.1" 404 1775 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/65.0.3325.162 Safari/537.36"
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /v1/.git/config HTTP/1.1" 404 1771 "-" "Mozilla/5.0 (Linux; Android 7.1.1; BBB100-1 Build/NMF26F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/59.0.3071.125 Mobile Safari/537.36"
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /src/.git/config HTTP/1.1" 404 1775 "-" "Mozilla/5.0 (OS/2; Warp 4.5; rv:24.0) Gecko/20100101 Firefox/24.0 SeaMonkey/2.21"
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /assets/.git/config HTTP/1.1" 404 1774 "-" "Mozilla/5.0 (Linux; Android 9; ONEPLUS A6010) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.180.8.153 - - [15/Jun/2026:06:13:51 +0000] "GET /site/.git/config HTTP/1.1" 404 1775 "-" "Mozilla/5.0 (Linux; U; Android 2.2; en-us; Nexus One Build/FRF91) Appl
...
show less
Web App Attack
🇮🇹
clamehost.it
2026-06-15 06:05:03
UTC ·
(4 months ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇳🇱
melroy89
2026-06-15 04:34:22
UTC ·
(4 months ago)
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200] "GET /src/.git/config HTTP/1.1" 404 31 "-" "Mozilla/5.0 (compatible; archive.org_bot; Wayback Machine Live Record; +http://archive.org/details/archive.org_bot)" "gitlabbot.melroy.org" 0.001
34.180.8.153 ...
show more
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200] "GET /src/.git/config HTTP/1.1" 404 31 "-" "Mozilla/5.0 (compatible; archive.org_bot; Wayback Machine Live Record; +http://archive.org/details/archive.org_bot)" "gitlabbot.melroy.org" 0.001
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200] "GET /v2/.git/config HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 5.0.1; GT-I9500) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "gitlabbot.melroy.org" 0.000
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200] "GET /v3/.git/config HTTP/1.1" 404 31 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Safari/537.36" "gitlabbot.melroy.org" 0.001
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200] "GET /web/.git/config HTTP/1.1" 404 31 "-" "Mozilla/5.0 (Linux; Android 8.0.0; LDN-L21) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "gitlabbot.melroy.org" 0.000
34.180.8.153 - - [15/Jun/2026:06:33:23 +0200]
...
show less
Web App Attack
🇺🇸
Vianpyro
2026-06-15 04:08:03
UTC ·
(4 months ago)
Honeypot: 62 request(s) in 0 min. Paths: /frontend/.git/config, /api/.git/config, /v2/.git/config, /v3/.git/config, /app/.git/config. Method(s): GET. UA: UCWEB/8.8 (SymbianOS/9.2; U; en-US; NokiaE63) AppleWebKit/534.1 UCBrowser/8.8.0.. ASN: 396982 (G ...
show more
Honeypot: 62 request(s) in 0 min. Paths: /frontend/.git/config, /api/.git/config, /v2/.git/config, /v3/.git/config, /app/.git/config. Method(s): GET. UA: UCWEB/8.8 (SymbianOS/9.2; U; en-US; NokiaE63) AppleWebKit/534.1 UCBrowser/8.8.0.. ASN: 396982 (Google LLC).
show less
Web App Attack
Bad Web Bot
Hacking
Brute-Force
Anonymous
2026-06-15 02:40:02
UTC ·
(4 months ago)
suspicious request in access.log
Web App Attack
🇲🇾
Rizzy
2026-06-15 02:22:42
UTC ·
(4 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:42:12
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.180.8.153 (153.8.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:42:08.020299 2026] [security2:error] [pid 9156:tid 915 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.8.153 (153.8.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:42:08.020299 2026] [security2:error] [pid 9156:tid 9156] [client 34.180.8.153:49680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eurosoni.com"] [uri "/src/.git/config"] [unique_id "ai9YcBHL-Qj33rk8qrRd2wAAAFQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 00:31:43
UTC ·
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇿
Antinson
2026-06-14 23:31:10
UTC ·
(4 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-06-14 22:01:22
UTC ·
(4 months ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇫🇷
LoneRider
2026-06-14 21:24:54
UTC ·
(4 months ago)
[14/Jun/2026:23:24:53.364662 +0200] ai8cJTk1KYhYNVYnwVjG4gAAAAs 34.180.8.153 55848 127.0.0.1 7081
[14/Jun/2026:23:24:53.375062 +0200] ai8cJQdN-d73jGrSxglM1gAAAAc 34.180.8.153 55852 127.0.0.1 7081
[14/Jun/2026:23:24:53.383356 +0200] ai8cJV0IkVT4E_9gxr ...
show more
[14/Jun/2026:23:24:53.364662 +0200] ai8cJTk1KYhYNVYnwVjG4gAAAAs 34.180.8.153 55848 127.0.0.1 7081
[14/Jun/2026:23:24:53.375062 +0200] ai8cJQdN-d73jGrSxglM1gAAAAc 34.180.8.153 55852 127.0.0.1 7081
[14/Jun/2026:23:24:53.383356 +0200] ai8cJV0IkVT4E_9gxrlM5wAAAAY 34.180.8.153 55860 127.0.0.1 7081
...
show less
Hacking
🇵🇱
Niko's Stuff
2026-06-14 06:59:38
UTC ·
(4 months ago)
Triggered crowdsecurity/http-sensitive-files. More information at: https://app.crowdsec.net/cti/34.180.8.153
Web App Attack
Hacking
🇬🇧
thetomtaylor.co.uk
2026-06-14 06:05:03
UTC ·
(4 months ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice02,wa01]
Hacking
Brute-Force
Bad Web Bot
Web App Attack