๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:00:22
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 15:24:10
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:24:03.860151 2026] [security2:error] [pid 11232:tid 11232] [client 34.38.229.144:39302] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thepenandquill.com"] [uri "/.git/config"] [unique_id "aigwE3WqZbTFOk9ya51iYwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 15:01:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:01:01.896115 2026] [security2:error] [pid 31619:tid 31619] [client 34.38.229.144:42844] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.itimetable21.com"] [uri "/.git/config"] [unique_id "aigqrUR0G6GyX2uKQbgeYAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-09 12:47:57
(2 days ago)
[TueJun0914:47:54.0768632026][security2:error][pid1123865:tid1124061][client34.38.229.144:0]ModSecur ...
show more
[TueJun0914:47:54.0768632026][security2:error][pid1123865:tid1124061][client34.38.229.144:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"autodiscover.aeapcl.ch\"][uri\"/.git/config\"][unique_id\"aigLehpVUXS4H46b2NphWwAAAMM\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:15:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:14:57.029456 2026] [security2:error] [pid 8937:tid 8937] [client 34.38.229.144:45936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "environmentaldesigns.org"] [uri "/.git/config"] [unique_id "aifnoce69b5eym_apak1LQAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Axel
2026-06-09 07:43:41
(2 days ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-06-09 07:06:53
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:06:45.604556 2026] [security2:error] [pid 16139:tid 16139] [client 34.38.229.144:52270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lacasadeterra.com"] [uri "/.git/config"] [unique_id "aie7hYY9XZMmoLUaL7914gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:43:31
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:43:25.447664 2026] [security2:error] [pid 26763:tid 26763] [client 34.38.229.144:48044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "activethinkers.net"] [uri "/.git/config"] [unique_id "aie2DaZC1m1p9mtNnu-NtwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:57:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:57:42.138113 2026] [security2:error] [pid 12437:tid 12445] [client 34.38.229.144:41608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uniquelynoel.com"] [uri "/.git/config"] [unique_id "aierVrzEVxhXdfxaxMri1QAAAUU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
SOC Blue Team
2026-06-09 05:26:03
(2 days ago)
IPs get by Hunting on SIEM
Phishing
Web Spam
Port Scan
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 04:42:49
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:42:41.824340 2026] [security2:error] [pid 1307:tid 1307] [client 34.38.229.144:56100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bradjohnsonqh.com"] [uri "/.git/config"] [unique_id "aieZwTPlJoLNoox6VVm2YwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:46:22
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:46:15.516369 2026] [security2:error] [pid 3012:tid 3025] [client 34.38.229.144:51922] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gardenclub.ramona.town"] [uri "/.git/config"] [unique_id "aid-d8a_7uKqtHeDqAyx3QAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:03:47
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:03:42.821154 2026] [security2:error] [pid 23801:tid 23801] [client 34.38.229.144:51982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.agroeurocommodities.com"] [uri "/.git/config"] [unique_id "aid0furD-idvcFuWuTAyQgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
aranguren.org
2026-06-09 01:05:43
(3 days ago)
34.38.229.144 - - [09/Jun/2026:11:05:27 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0 ...
show more
34.38.229.144 - - [09/Jun/2026:11:05:27 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_5) AppleWebKit/536.26.17 (KHTML like Gecko) Version/6.0.2 Safari/536.26.17"
34.38.229.144 - - [09/Jun/2026:11:05:42 +1000] "GET /.git/info/ HTTP/1.1" 200 932 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
34.38.229.144 - - [09/Jun/2026:11:05:42 +1000] "GET /.git/config HTTP/1.1" 200 332 "-" "Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 00:18:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.229.144 (144.229.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:17:59.728099 2026] [security2:error] [pid 11781:tid 11781] [client 34.38.229.144:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.infocard.atlascoombs.com"] [uri "/.git/config"] [unique_id "aidbt8Ouz6zf5d8xiZ2afgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack