๐ณ๐ฑ
homeshowdomain.nl
2026-06-10 22:00:03
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
๐จ๐ญ
TheCoon
2026-06-10 19:30:02
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 14:15:08
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:15:00.919077 2026] [security2:error] [pid 20126:tid 20126] [client 34.50.108.32:53948] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timezonespro.com"] [uri "/.git/config"] [unique_id "aigf5NKwUV4Q7lL5jROiIwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 12:35:18
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.50.108.32 (ID/Indonesia/32.108.50. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.50.108.32 (ID/Indonesia/32.108.50.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐จ๐ญ
4server
2026-06-09 09:23:13
(1 week ago)
[TueJun0911:23:07.2942972026][security2:error][pid428972:tid429153][client34.50.108.32:0]ModSecurity ...
show more
[TueJun0911:23:07.2942972026][security2:error][pid428972:tid429153][client34.50.108.32:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"www.inserzioniticino.ch\"][uri\"/.git/config\"][unique_id\"aifbe1aXLzwmDVUamazdWgAAAIE\"]
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:20:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:20:20.732830 2026] [security2:error] [pid 29829:tid 29967] [client 34.50.108.32:33508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.indrasana.com.anthonydalessandro.com"] [uri "/.git/config"] [unique_id "aifa1OzPc-QZ1US6DA1jqQAAAhM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:03:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:03:28.848208 2026] [security2:error] [pid 30667:tid 30667] [client 34.50.108.32:50474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jsw4.net"] [uri "/.git/config"] [unique_id "aie6wCCgpfMQoPXLKGfdMwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:44:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:44:14.227482 2026] [security2:error] [pid 22262:tid 22262] [client 34.50.108.32:46362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocknwalktours.com"] [uri "/.git/config"] [unique_id "aieoLi3mgEos0mgNkr-bmAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
inlink.ltd
2026-06-09 03:02:53
(1 week ago)
dot file probe
Web App Attack
๐ฉ๐ช
Blexyel
2026-06-09 02:33:01
(1 week ago)
34.50.108.32 - - [09/Jun/2026:04:33:01 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ( ...
show more
34.50.108.32 - - [09/Jun/2026:04:33:01 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (X11; Linux i686; rv:46.0) Gecko/20100101 Firefox/46.0"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:06:40
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:06:37.454115 2026] [security2:error] [pid 8150:tid 8150] [client 34.50.108.32:47436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title23.com"] [uri "/.git/config"] [unique_id "aid1LdrsKTY24NfqndOiZAAAAJE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Lino Project
2026-06-09 01:53:10
(1 week ago)
34.50.108.32 - - [09/Jun/2026:03:53:05 +0200] "GET /.git/config HTTP/1.1" 403 3895 "-" "Mozilla/5.0 ...
show more
34.50.108.32 - - [09/Jun/2026:03:53:05 +0200] "GET /.git/config HTTP/1.1" 403 3895 "-" "Mozilla/5.0 (iPad; CPU OS 12_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1 Mobile/15E148 Safari/604.1"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 01:19:58
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.108.32 (32.108.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:19:54.372547 2026] [security2:error] [pid 13502:tid 13502] [client 34.50.108.32:45046] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tigerpathteam.org"] [uri "/.git/config"] [unique_id "aidqOhpAWqz-uVGCa5lvkgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-08 23:15:04
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:03:37
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking