🇳🇱
homeshowdomain.nl
2026-06-15 21:59:53
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇫🇷
fenogent.com
2026-06-15 09:45:04
(1 month ago)
CrowdSec: crowdsecurity/recidive (1 events)
Web App Attack
🇮🇹
Inartis
2026-06-15 09:42:05
(1 month ago)
34.21.210.231 - - [15/Jun/2026:11:42:02 +0200] "GET /.git/config HTTP/1.1" 403 3582 "-" "Mozilla/5.0 ...
show more
34.21.210.231 - - [15/Jun/2026:11:42:02 +0200] "GET /.git/config HTTP/1.1" 403 3582 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-06-15 09:10:10
(1 month ago)
Web App Attack
🇳🇱
i-turnradio.nl
2026-06-15 08:00:05
(1 month ago)
2026-06-15 @ 10:00:05 (CET) ~ Blocked for trying to access: /shop/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 07:45:44
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 03:45:37.777603 2026] [security2:error] [pid 31480:tid 31480] [client 34.21.210.231:59534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.music.jonrcortright.com"] [uri "/.git/config"] [unique_id "ai-toct6VA-bmFuI6t3uwQAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-06-15 07:33:18
(1 month ago)
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-sensitive-files
Hacking
🇺🇸
alecj.com
2026-06-15 06:22:42
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-15 06:10:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:10:04.958117 2026] [security2:error] [pid 17420:tid 17420] [client 34.21.210.231:41132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jamesmsmall.paleopathologist.com"] [uri "/api/.git/config"] [unique_id "ai-XPDnmQweBfk5I66b94QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-06-15 05:41:44
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:37:00
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:36:53.750189 2026] [security2:error] [pid 20020:tid 20020] [client 34.21.210.231:60476] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "juca.com.mx"] [uri "/build/.git/config"] [unique_id "ai-PdY-FHd-vqfq1_G7figAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:35:58
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.210.231 (231.210.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:35:54.828838 2026] [security2:error] [pid 6957:tid 6957] [client 34.21.210.231:55528] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.supaskillsdata.gregorii.com"] [uri "/public/.git/config"] [unique_id "ai9lChqocOQGioolqDQH4QAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 02:30:29
(1 month ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇫🇮
YF
2026-06-15 02:00:45
(1 month ago)
404 errors Vulnerability scan
Web App Attack
🇩🇪
raph
2026-06-15 01:45:24
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack