๐ณ๐ฑ
homeshowdomain.nl
2026-06-10 21:59:59
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:00:13
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-09
Web App Attack
SSH
Hacking
Anonymous
2026-06-09 13:30:30
(1 week ago)
34.40.141.131 - - [09/Jun/2026:10:30:30 -0300] "GET /.git/config HTTP/1.1" 403 1179 "-" "Mozilla/5.0 ...
show more
34.40.141.131 - - [09/Jun/2026:10:30:30 -0300] "GET /.git/config HTTP/1.1" 403 1179 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
...
show less
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
๐บ๐ธ
TPI-Abuse
2026-06-09 10:24:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:24:29.539926 2026] [security2:error] [pid 1164:tid 1164] [client 34.40.141.131:38642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ventilatori-industriali.vm-srl.com"] [uri "/.git/config"] [unique_id "aifp3dxdI9TNqrRWx-GChQAAAC8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 09:43:27
(1 week ago)
34.40.141.131 - - [09/Jun/2026:17:43:26 +0800] "GET /.git/config HTTP/1.1" 404 299877 "-" "Mozilla/5 ...
show more
34.40.141.131 - - [09/Jun/2026:17:43:26 +0800] "GET /.git/config HTTP/1.1" 404 299877 "-" "Mozilla/5.0 (X11; Linux i686; rv:6.0a2) Gecko/20110615 Firefox/6.0a2 Iceweasel/6.0a2"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 04:55:01
(1 week ago)
suspicious request in access.log
Web App Attack
๐ฌ๐ง
gurnip
2026-06-09 04:26:55
(1 week ago)
Vulnerability probe of page /.git/config, not found on server.
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-09 04:20:39
(1 week ago)
Try to access /.git/config
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-06-09 04:06:23
(1 week ago)
[Tue Jun 09 14:06:23.128269 2026] [security2:error] [pid 212868] [client 34.40.141.131:47456] [clien ...
show more
[Tue Jun 09 14:06:23.128269 2026] [security2:error] [pid 212868] [client 34.40.141.131:47456] [client 34.40.141.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "paulshipley.info"] [uri "/.git/config"] [unique_id "aieRP6g3gn8F8okozs0s-wAAABA"]
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:44:51
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:44:44.194910 2026] [security2:error] [pid 3414:tid 3414] [client 34.40.141.131:35612] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ralphharris.org"] [uri "/.git/config"] [unique_id "aieMLBYTJe_yT-Q1WfgzGAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Rocky Mountain Bioengineering Symposium
2026-06-09 03:32:42
(1 week ago)
34.40.141.131 - - [08/Jun/2026:21:32:42 -0600] "GET /.git/config HTTP/1.1" 301 7258 "-" "Mozilla/5.0 ...
show more
34.40.141.131 - - [08/Jun/2026:21:32:42 -0600] "GET /.git/config HTTP/1.1" 301 7258 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.80 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:49:07
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:49:02.932421 2026] [security2:error] [pid 525:tid 525] [client 34.40.141.131:34370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "alphaplanning.com"] [uri "/.git/config"] [unique_id "aid_Ht6pNuihm_z6YP-nTQAAAFY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 01:34:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.141.131 (131.141.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:34:23.719949 2026] [security2:error] [pid 10396:tid 10396] [client 34.40.141.131:37172] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.customdatasolutions.net.pjvcds.com"] [uri "/.git/config"] [unique_id "aidtn1K98Lyc-fw5rBmS1gAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 01:12:19
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.40.141.131 (AU/Australia/131.141.4 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.40.141.131 (AU/Australia/131.141.40.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
mnsf
2026-06-09 01:07:08
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack