๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 21:59:46
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 16:18:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:17:56.098555 2026] [security2:error] [pid 23947:tid 23947] [client 34.24.131.30:56518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wsdtc.net"] [uri "/.git/config"] [unique_id "aig8tOXcM4jgM6QXYSkQVAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-06-09 15:55:40
(4 days ago)
34.24.131.30 - - [09/Jun/2026:15:55:37 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wi ...
show more
34.24.131.30 - - [09/Jun/2026:15:55:37 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Whale/1.5.75.9 Safari/537.36"
34.24.131.30 - - [09/Jun/2026:15:55:39 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
WellSpring
2026-06-09 15:28:01
(4 days ago)
git exposure on 650.today/.git/config โ WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:53:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:52:55.098031 2026] [security2:error] [pid 28620:tid 28620] [client 34.24.131.30:37022] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "proof.bonefrog.com"] [uri "/.git/config"] [unique_id "aigat56MrB-kWty7UI12EgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-06-09 11:42:27
(4 days ago)
34.24.131.30 - - [09/Jun/2026:13:42:23 +0200] "GET /.git/config HTTP/1.1" 403 5250 "-" "Mozilla/5.0 ...
show more
34.24.131.30 - - [09/Jun/2026:13:42:23 +0200] "GET /.git/config HTTP/1.1" 403 5250 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.88 Safari/537.36 Vivaldi/2.4.1488.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-09 11:13:41
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ง๐ช
cmbplf
2026-06-09 10:33:53
(5 days ago)
14.987 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐จ๐ญ
4server
2026-06-09 09:28:30
(5 days ago)
[TueJun0911:28:23.5615292026][security2:error][pid428976:tid429177][client34.24.131.30:0]ModSecurity ...
show more
[TueJun0911:28:23.5615292026][security2:error][pid428976:tid429177][client34.24.131.30:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.aidconsultancy.ch\"][uri\"/.git/config\"][unique_id\"aifctzjtyToF3A35_ViuEAAAAQQ\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:51:21
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:51:15.122462 2026] [security2:error] [pid 20632:tid 20632] [client 34.24.131.30:37270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yosalvationyo.org.jimwilsongallery.com"] [uri "/.git/config"] [unique_id "aifUA_jnizO7R6gG3g9e8QAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:31:15
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.131.30 (30.131.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:31:09.461260 2026] [security2:error] [pid 25518:tid 25518] [client 34.24.131.30:60518] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timetemple.org"] [uri "/.git/config"] [unique_id "aifBPfYl5MjO5D2pSxcI0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
iNetWorker
2026-06-09 06:26:43
(5 days ago)
trolling for resource vulnerabilities
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 05:53:48
(5 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.24.131.30 (US/United States/30.131 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.24.131.30 (US/United States/30.131.24.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐ฉ๐ช
big-cloud.nl
2026-06-09 05:37:18
(5 days ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
mnsf
2026-06-09 02:05:15
(5 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack