🇳🇱
homeshowdomain.nl
2026-07-21 22:00:55
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-20.
show less
Web App Attack
SSH
Hacking
🇧🇪
boxed-it
2026-07-20 19:12:45
(2 days ago)
GET /.git/config (Tarpitted for 34m46s, wasted 122.34kB)
Web App Attack
🇺🇸
mnsf
2026-07-20 19:05:19
(2 days ago)
Abuse Detected (20)
Brute-Force
Web App Attack
🇸🇪
Esko
2026-07-20 18:57:46
(2 days ago)
34.19.4.150 - - [20/Jul/2026:18:57:46 +0000] "GET /.git/config HTTP/1.1" 488 0 "-" "Mozilla/5.0 (X11 ...
show more
34.19.4.150 - - [20/Jul/2026:18:57:46 +0000] "GET /.git/config HTTP/1.1" 488 0 "-" "Mozilla/5.0 (X11; Linux x86_64)"
show less
Web App Attack
🇺🇸
jcbriar
2026-07-20 18:54:17
(2 days ago)
Searching for vulnerable scripts
Hacking
Web App Attack
🇩🇪
big-cloud.nl
2026-07-20 18:53:30
(2 days ago)
Try to access /de-ideale-stookmix//.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:52:27
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:52:20.814977 2026] [security2:error] [pid 29084:tid 29084] [client 34.19.4.150:44692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "davedoeswater.com"] [uri "/.git/config"] [unique_id "al5uZGq1KcD70GSET1iE6QAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ut-addicted.com
2026-07-20 18:49:19
(2 days ago)
\[Mon Jul 20 20:49:17.474514 2026\] \[:error\] \[pid 15777:tid 139785674864384\] \[client 34.19.4.15 ...
show more
\[Mon Jul 20 20:49:17.474514 2026\] \[:error\] \[pid 15777:tid 139785674864384\] \[client 34.19.4.150:47254\] \[client 34.19.4.150\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/config"\] \[unique_id "al5trXY8am07OiL0@nCZOwAAANY"\]
show less
Brute-Force
Web App Attack
🇩🇪
iNetWorker
2026-07-20 18:35:32
(2 days ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:35:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:35:13.320303 2026] [security2:error] [pid 1348296:tid 1348296] [client 34.19.4.150:52656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "casaluzislamujeres.com"] [uri "/.git/config"] [unique_id "al5qYfrxyHwb4IU8GtAIZwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
6kilowatti
2026-07-20 18:07:28
(2 days ago)
34.19.4.150 - - [20/Jul/2026:21:07:26 +0300] "GET /.git/config HTTP/1.1" 500 2506 "-" "Mozilla/5.0 ( ...
show more
34.19.4.150 - - [20/Jul/2026:21:07:26 +0300] "GET /.git/config HTTP/1.1" 500 2506 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Web App Attack
🇩🇪
Blexyel
2026-07-20 18:02:58
(2 days ago)
34.19.4.150 - - [20/Jul/2026:20:02:57 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X ...
show more
34.19.4.150 - - [20/Jul/2026:20:02:57 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux x86_64)"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-20 18:01:20
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.4.150 (150.4.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 20 14:01:12.827808 2026] [security2:error] [pid 572716:tid 572716] [client 34.19.4.150:56222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asapstarsmogcheck.com"] [uri "/.git/config"] [unique_id "al5iaAl_S8S978GYtmVNswAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-07-20 17:55:02
(2 days ago)
suspicious request in access.log
Web App Attack
🇺🇸
mashamal
2026-07-20 17:53:57
(2 days ago)
Vulnerability Probe
...
Web App Attack