🇳🇱
homeshowdomain.nl
2026-06-15 21:59:54
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 08:16:32
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:16:27.016590 2026] [security2:error] [pid 31467:tid 31467] [client 34.39.187.79:58726] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woodlandantiques.net"] [uri "/.git/config"] [unique_id "ai-021bQrg91jdmlBlqpIgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-15 07:46:45
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇹
René Hickersberger
2026-06-15 07:28:01
(2 weeks ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Linux x86_64) Apple ...
show more
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3876.0 Safari/537.36"
show less
Web App Attack
🇫🇷
masterguru
2026-06-15 07:19:51
(2 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:44:42
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:44:39.568127 2026] [security2:error] [pid 8026:tid 8026] [client 34.39.187.79:60796] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.californiabrokers.californiaappraisers.net"] [uri "/v2/.git/config"] [unique_id "ai-fV83rzLQ3XP6nGzlwhgAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:07:43
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:07:36.796870 2026] [security2:error] [pid 24278:tid 24278] [client 34.39.187.79:56896] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "woosterclassof64.com"] [uri "/app/.git/config"] [unique_id "ai-ImD9bAwJOoki8ZYiQEAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dbmwebdesign
2026-06-15 05:05:25
(2 weeks ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇧🇪
taivas.nl
2026-06-15 04:33:17
(2 weeks ago)
Many_bad_calls
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:34:37
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:34:32.505021 2026] [security2:error] [pid 11930:tid 11930] [client 34.39.187.79:54246] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pharmaceuticalsalescertifications.com"] [uri "/app/.git/config"] [unique_id "ai9yyEr334I2EhPFri3OrgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
febrian.de
2026-06-15 03:13:35
(2 weeks ago)
HTTP(S) probing or brute-force attack detected by Fail2Ban
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-06-15 02:20:53
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-15 02:04:33
(2 weeks ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇺🇸
TPI-Abuse
2026-06-14 23:32:15
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 19:32:11.184168 2026] [security2:error] [pid 24113:tid 24113] [client 34.39.187.79:47146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "zenventures.co.uk"] [uri "/src/.git/config"] [unique_id "ai85-4KGtW7tx01IcYsINAAAAGM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 22:26:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.187.79 (79.187.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 18:26:32.568989 2026] [security2:error] [pid 27856:tid 27856] [client 34.39.187.79:54756] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ramseycountycorruption.com"] [uri "/v2/.git/config"] [unique_id "ai8qmDcWK0WrLoYeCgroQwAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack