๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:02:31
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 16:08:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:08:25.559748 2026] [security2:error] [pid 26066:tid 26066] [client 34.38.95.177:52294] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "langkawi-boat-registration.com"] [uri "/.git/config"] [unique_id "aig6eYLoJyp6xzMW9Fx1PgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 13:22:47
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:22:42.223393 2026] [security2:error] [pid 1279:tid 1279] [client 34.38.95.177:51760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stellwagenmusic.com.jimgrenier.com"] [uri "/.git/config"] [unique_id "aigTojctEqN7Qa7qZisxXAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:21:37
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:21:29.329064 2026] [security2:error] [pid 16346:tid 16346] [client 34.38.95.177:33856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail-rfinder.com"] [uri "/.git/config"] [unique_id "aif3OcGqzmVHGREPcjiaDwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 10:18:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:18:25.999633 2026] [security2:error] [pid 28272:tid 28272] [client 34.38.95.177:50992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rucomp.com"] [uri "/.git/config"] [unique_id "aifocdhvdnJNc7HeP3CeEwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-09 10:12:07
(3 days ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ...
show more
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
show less
Bad Web Bot
๐ฉ๐ช
big-cloud.nl
2026-06-09 09:12:22
(3 days ago)
Try to access /.git/config
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 08:52:28
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 04:52:25.354819 2026] [security2:error] [pid 26693:tid 26693] [client 34.38.95.177:59972] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "avantgarde-hk.org"] [uri "/.git/config"] [unique_id "aifUSfPoOlpwnGQijiM_hAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-06-09 08:26:11
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.90 Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ซ๐ท
masterguru
2026-06-09 08:12:38
(3 days ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.38.95.177 (BE/Belgium/177.95.38.34 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.38.95.177 (BE/Belgium/177.95.38.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 07:16:20
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:16:16.032201 2026] [security2:error] [pid 20119:tid 20119] [client 34.38.95.177:60716] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jean-louisdarville.com"] [uri "/.git/config"] [unique_id "aie9wB3TZ1A-eSxGmEzLlQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
TechnoSolutions CL
2026-06-09 06:58:42
(3 days ago)
34.38.95.177 - - [09/Jun/2026:06:58:39 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "w3m/0.5.1"
34.3 ...
show more
34.38.95.177 - - [09/Jun/2026:06:58:39 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "w3m/0.5.1"
34.38.95.177 - - [09/Jun/2026:06:58:42 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
4server
2026-06-09 06:54:52
(3 days ago)
[TueJun0908:54:47.0730542026][security2:error][pid4031286:tid4031730][client34.38.95.177:0]ModSecuri ...
show more
[TueJun0908:54:47.0730542026][security2:error][pid4031286:tid4031730][client34.38.95.177:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webdisk.inserzioniticino.ch\"][uri\"/.git/config\"][unique_id\"aie4tyAJaJY92hPA7omOPQAAAEU\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:38:50
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:38:45.094330 2026] [security2:error] [pid 14305:tid 14305] [client 34.38.95.177:58874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "owldreamllc.com"] [uri "/.git/config"] [unique_id "aie09dvRoX3ZHaWn-l_NIgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:53:16
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.95.177 (177.95.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:53:09.926228 2026] [security2:error] [pid 26536:tid 26536] [client 34.38.95.177:45582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.lexie.org"] [uri "/.git/config"] [unique_id "aieqRUlyn6d2xggKrBld3QAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack