🇳🇱
homeshowdomain.nl
2026-06-15 21:59:35
UTC ·
(4 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
Web App Attack
SSH
Hacking
🇧🇪
Saec
2026-06-15 05:00:03
UTC ·
(4 months ago)
Jarvis auto-ban: CF top attacker on saec.me (30 hits, US)
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 04:29:42
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:29:39.202090 2026] [security2:error] [pid 24569:tid 2456 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:29:39.202090 2026] [security2:error] [pid 24569:tid 24569] [client 34.22.42.24:60338] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.emmpftp.tremulant.com"] [uri "/.git/config"] [unique_id "ai9_s7V7se-2e3_4GZ8eHgAAADY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-15 04:24:22
UTC ·
(4 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇬🇧
Oakley
2026-06-15 03:10:35
UTC ·
(4 months ago)
(confirmed_bot_sig) Confirmed bot
Hacking
🇺🇸
TPI-Abuse
2026-06-15 02:06:17
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:06:09.895515 2026] [security2:error] [pid 2908:tid 2908] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:06:09.895515 2026] [security2:error] [pid 2908:tid 2908] [client 34.22.42.24:40678] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.glamorgirl.net"] [uri "/www/.git/config"] [unique_id "ai9eEWOPlq0AHP7X5EkxXQAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
YF
2026-06-15 01:05:11
UTC ·
(4 months ago)
Git config exposure probe
Web App Attack
🇺🇸
Matthew Ping
2026-06-15 00:30:01
UTC ·
(4 months ago)
ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇩🇪
Ba-Yu
2026-06-15 00:17:54
UTC ·
(4 months ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
mnsf
2026-06-15 00:08:20
UTC ·
(4 months ago)
Abuse Detected (30)
Brute-Force
Web App Attack
🇺🇸
Gabriel Camargo
2026-06-14 23:45:44
UTC ·
(4 months ago)
34.22.42.24 - - [14/Jun/2026:18:45:44 -0500] "GET /app/.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3947.100 Safari/537.36"
34.22.42.24 - - [14/Jun/2026:18:45:44 -0500] "GET ...
show more
34.22.42.24 - - [14/Jun/2026:18:45:44 -0500] "GET /app/.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3947.100 Safari/537.36"
34.22.42.24 - - [14/Jun/2026:18:45:44 -0500] "GET /src/.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 6.0.1; SM-N910C) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36"
34.22.42.24 - - [14/Jun/2026:18:45:44 -0500] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:47.0) Gecko/20100101 Firefox/47.0"
...
show less
Brute-Force
SSH
🇩🇪
4server
2026-06-14 23:34:58
UTC ·
(4 months ago)
[MonJun1501:34:52.1328252026][security2:error][pid3433961:tid3433986][client34.22.42.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[MonJun1501:34:52.1328252026][security2:error][pid3433961:tid3433986][client34.22.42.24:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.cpfacilityservices.ch.136-243-54-122.cpanel.site\"][uri\"/app/.git/config\"][unique_id\"ai86nPVHKKAbdH2Vu-gJYAAAABU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 23:12:10
UTC ·
(4 months ago)
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:12:03.815537 2026] [security2:error] [pid 17853:tid 1785 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.42.24 (24.42.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:12:03.815537 2026] [security2:error] [pid 17853:tid 17853] [client 34.22.42.24:41430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leothecolorman.com"] [uri "/web/.git/config"] [unique_id "ai81QxTxjfSn-y9EjTOOggAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-14 23:01:39
UTC ·
(4 months ago)
Unauthorized access to webpage admin
Web App Attack
🇳🇱
Savvii
2026-06-14 22:26:13
UTC ·
(4 months ago)
30 attempts against mh_ha-misbehave-ban on taro
Brute-Force
Bad Web Bot
Web App Attack