🇫🇷
masterguru
2026-06-11 10:47:29
(1 week ago)
Too much 404 requests in 1 minute. Operator GE matched 10 at IP:block_script. (46020-201)
Hacking
🇳🇱
homeshowdomain.nl
2026-06-09 21:59:41
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇫🇷
SpaceHost-Server
2026-06-08 22:29:37
(1 week ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-08 22:01:30
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
2026-06-08 21:15:13
(1 week ago)
"GET /.git/config HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 20:30:32
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:30:26.736672 2026] [security2:error] [pid 31057:tid 31057] [client 34.57.221.216:38430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hudswell.com"] [uri "/.git/config"] [unique_id "aicmYsUgZdRX8ht2WtHBuwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Flo Flo
2026-06-08 16:44:14
(1 week ago)
34.57.221.216 - - - [08/Jun/2026:18:44:13 +0200] "flad.xyz" "GET /.git/config HTTP/1.1" 444 0 "-" "M ...
show more
34.57.221.216 - - - [08/Jun/2026:18:44:13 +0200] "flad.xyz" "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" 0.000
...
show less
Web App Attack
2026-06-08 16:09:58
(1 week ago)
Fail2Ban triggered
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 15:24:27
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 11:24:22.514847 2026] [security2:error] [pid 28599:tid 28599] [client 34.57.221.216:60712] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.monmouthcountydanceclasses.com.leonardodecaprio.com"] [uri "/.git/config"] [unique_id "aibeprXWbxV2IQwrNuamKAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
TechnoSolutions CL
2026-06-08 14:30:14
(1 week ago)
34.57.221.216 - - [08/Jun/2026:14:30:11 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X ...
show more
34.57.221.216 - - [08/Jun/2026:14:30:11 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (X11; U; SunOS i86pc; en-US; rv:1.8.1.12) Gecko/20080303 SeaMonkey/1.1.8"
34.57.221.216 - - [08/Jun/2026:14:30:14 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.1.114 Yowser/2.5 Safari/537.36"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 12:11:53
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.221.216 (216.221.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 08:11:47.307482 2026] [security2:error] [pid 22203:tid 22203] [client 34.57.221.216:56286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lhhs69.johnpritchett.com"] [uri "/.git/config"] [unique_id "aiaxg1Av-JWmQf6hEBgBsAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-06-08 11:42:15
(1 week ago)
dot file probe
Web App Attack
🇦🇺
2000cn.com.au
2026-06-08 11:08:56
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
4server
2026-06-08 11:02:03
(1 week ago)
[MonJun0813:01:57.1311012026][security2:error][pid1135271:tid1135367][client34.57.221.216:0]ModSecur ...
show more
[MonJun0813:01:57.1311012026][security2:error][pid1135271:tid1135367][client34.57.221.216:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.spazi-web-hosting.artisteer-italia.org\"][uri\"/.git/config\"][unique_id\"aiahJVHwKwh0JBVK3zvNWgAAAQA\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇷
alexsky06
2026-06-08 10:59:27
(1 week ago)
WAF block: crowdsecurity/vpatch-git-config from 34.57.221.216
Web App Attack
Hacking