🇳🇱
homeshowdomain.nl
2026-06-10 21:59:40
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇧🇪
cmbplf
2026-06-09 17:30:02
(2 months ago)
25.102 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇩🇪
4server
2026-06-09 13:28:33
(2 months ago)
[TueJun0915:28:31.3286142026][security2:error][pid2989131:tid2989236][client34.21.241.247:0]ModSecur ...
show more
[TueJun0915:28:31.3286142026][security2:error][pid2989131:tid2989236][client34.21.241.247:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hdcadvisory.ch\"][uri\"/.git/config\"][unique_id\"aigU__aQSEAZovBlP6vtFQAAAFU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
Takesh
2026-06-09 11:25:25
(2 months ago)
Numbase auto-report: sensitive_honeypot:/.git/config
Bad Web Bot
🇩🇪
big-cloud.nl
2026-06-09 10:37:09
(2 months ago)
Try to access /.git/config
Web App Attack
🇺🇸
mashamal
2026-06-09 09:39:34
(2 months ago)
Vulnerability Probe
...
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:01:20
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:01:14.692479 2026] [security2:error] [pid 29675:tid 29691] [client 34.21.241.247:47128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.accreditedlawschool.aafm.us"] [uri "/.git/config"] [unique_id "aifWWge47lP6_7fRsVYqjQAAAU0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇹
NotACaptcha
2026-06-09 08:11:51
(2 months ago)
webserver:443 [09/Jun/2026] "GET /.git/config HTTP/1.1" 403 4156 "-" "Mozilla/5.0 (X11; Linux x86_6 ...
show more
webserver:443 [09/Jun/2026] "GET /.git/config HTTP/1.1" 403 4156 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.145 Safari/537.36 Vivaldi/2.6.1566.49"
show less
Web App Attack
🇬🇧
Swiptly
2026-06-09 07:39:35
(2 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇨🇭
4server
2026-06-09 06:37:56
(2 months ago)
[TueJun0908:37:53.3365942026][security2:error][pid3964854:tid3965079][client34.21.241.247:0]ModSecur ...
show more
[TueJun0908:37:53.3365942026][security2:error][pid3964854:tid3965079][client34.21.241.247:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mondialtrade.ch\"][uri\"/.git/config\"][unique_id\"aie0wTQCk9gZLe0C1JZiWQAAAMQ\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 06:06:28
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:06:24.195809 2026] [security2:error] [pid 2235:tid 2235] [client 34.21.241.247:45030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asiancommoditiescorporation.com"] [uri "/.git/config"] [unique_id "aietYHdGz6C8NvvOs2Qz3wAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:49:16
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:49:09.727430 2026] [security2:error] [pid 20173:tid 20173] [client 34.21.241.247:37712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.manaplas.com"] [uri "/.git/config"] [unique_id "aiebRXLyfJ5tT1BVP5swxQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:02:13
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.21.241.247 (247.241.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.21.241.247 (247.241.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:02:07.921700 2026] [security2:error] [pid 15193:tid 15193] [client 34.21.241.247:58486] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "hotelrevabookings.com.hamiltonbookings.com"] [uri "/.git/config"] [unique_id "aieQP-LIJrEJlt9J-ttTlgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 02:06:05
(2 months ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:01:41
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.241.247 (247.241.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:01:37.389407 2026] [security2:error] [pid 30026:tid 30033] [client 34.21.241.247:46088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infectioncontrolsys.com.pwrcoupling.com"] [uri "/.git/config"] [unique_id "aid0AeYYxTqQ__3a4VSr3wAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack