🇳🇱
homeshowdomain.nl
2026-06-10 21:59:34
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-06-09 22:00:58
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-06-09
Web App Attack
SSH
Hacking
🇫🇷
masterguru
2026-06-09 15:44:04
(2 weeks ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.40.226.50 (AU/Australia/50.226.40. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.40.226.50 (AU/Australia/50.226.40.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇧🇪
voormedia
2026-06-09 14:26:05
(2 weeks ago)
Accessed trap at '/.git/config'
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:47:24
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:47:19.617826 2026] [security2:error] [pid 32354:tid 32354] [client 34.40.226.50:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.vertubet.com"] [uri "/.git/config"] [unique_id "aigLVw_h2CmuddnlYx85RQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 11:57:05
(2 weeks ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 10:44:42
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 06:44:34.659270 2026] [security2:error] [pid 15869:tid 15869] [client 34.40.226.50:34076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "khtcpl.com"] [uri "/.git/config"] [unique_id "aifukumyPzdu4gZBcFHNpAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 09:50:01
(2 weeks ago)
suspicious request in access.log
Web App Attack
🇨🇭
4server
2026-06-09 09:37:33
(2 weeks ago)
[TueJun0911:37:28.1577762026][security2:error][pid428976:tid429219][client34.40.226.50:0]ModSecurity ...
show more
[TueJun0911:37:28.1577762026][security2:error][pid428976:tid429219][client34.40.226.50:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"swiss-sailing-system.ch\"][uri\"/.git/config\"][unique_id\"aife2DjtyToF3A35_ViudAAAARI\"]
show less
Hacking
Web App Attack
🇫🇮
inlink.ltd
2026-06-09 08:48:48
(2 weeks ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 06:28:38
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:28:31.697617 2026] [security2:error] [pid 24797:tid 24797] [client 34.40.226.50:46440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "loneoakhoney.com"] [uri "/.git/config"] [unique_id "aieyj_EoHuPwTRC6vSYDOwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-06-09 04:20:22
(2 weeks ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-06-09 04:06:57
(2 weeks ago)
2026/06/09 06:06:57 [error] 77667#107153: *2460206 access forbidden by rule, client: 34.40.226.50, s ...
show more
2026/06/09 06:06:57 [error] 77667#107153: *2460206 access forbidden by rule, client: 34.40.226.50, server: revolutionbim.com, request: "GET /.git/config HTTP/1.1", host: "revolutionbim.com"
...
show less
Web Spam
🇷🇴
INTEQ
2026-06-09 03:58:31
(2 weeks ago)
Web attack from 34.40.226.50
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:26:08
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.40.226.50 (50.226.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:26:03.846412 2026] [security2:error] [pid 12191:tid 12245] [client 34.40.226.50:59094] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.dermatologistdallas.com.aafm.us"] [uri "/.git/config"] [unique_id "aieHy3piueasRVYZza6B-AAAAcc"]
show less
Brute-Force
Bad Web Bot
Web App Attack