๐ณ๐ฑ
homeshowdomain.nl
2026-06-27 22:00:14
(1 hour ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-26.
show less
Web App Attack
SSH
Hacking
๐ง๐ช
sid3windr
2026-06-27 05:37:18
(17 hours ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
๐ซ๐ท
service Informatique
2026-06-26 04:00:37
(1 day ago)
/.git
Web App Attack
๐บ๐ธ
mnsf
2026-06-26 03:07:47
(1 day ago)
Scanning/Probing (30)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 02:07:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:07:42.776289 2026] [security2:error] [pid 19065:tid 19065] [client 34.28.110.171:54554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toxicwater.com"] [uri "/src/.git/config"] [unique_id "aj3e7h_R15SAbPMgr3idwAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Matthew Ping
2026-06-26 02:00:09
(1 day ago)
ModSecurity rule 949110 triggered on wp1. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
๐ซ๐ฎ
inlink.ltd
2026-06-26 01:31:20
(1 day ago)
dot file probe
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 00:57:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:56:55.715153 2026] [security2:error] [pid 32154:tid 32154] [client 34.28.110.171:60442] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slampools.com"] [uri "/app/.git/config"] [unique_id "aj3OVwkL5F826CVJya7HWgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-26 00:18:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:18:15.698912 2026] [security2:error] [pid 8921:tid 8921] [client 34.28.110.171:33002] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.jinglybits.com"] [uri "/v2/.git/config"] [unique_id "aj3FR-nooxbPjJJnp9IzgAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-06-25 23:48:40
(1 day ago)
164 requests with url.path *.git/*
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-25 23:40:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:40:45.386689 2026] [security2:error] [pid 23757:tid 23757] [client 34.28.110.171:47620] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.zydecajun.radio.fm"] [uri "/api/.git/config"] [unique_id "aj28fcRWCMlxoXwLpcZTRgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-25 22:47:47
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.28.110.171 (171.110.28.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 18:47:41.091981 2026] [security2:error] [pid 16654:tid 16654] [client 34.28.110.171:42296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.crescentcitycafe.org"] [uri "/backend/.git/config"] [unique_id "aj2wDR-9K2rJZghHMqMe-QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-25 18:13:19
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ฒ๐พ
Rizzy
2026-06-25 14:11:04
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-25 13:30:05
(2 days ago)
20 attempts against mh_ha-misbehave-ban on pea
Brute-Force
Bad Web Bot
Web App Attack