🇳🇱
homeshowdomain.nl
2026-08-28 21:59:43
(3 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking
🇳🇿
Antinson
2026-08-28 20:42:24
(4 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-28 15:54:22
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 11:54:15.087252 2026] [security2:error] [pid 11676:tid 11676] [client 34.65.241.184:53132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ccftpuser.photokarine.com"] [uri "/site/.git/config"] [unique_id "apGvJ-KzMJGMTwrpNyXLXgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hary74656
2026-08-28 13:47:51
(11 hours ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=5. No raw log data included.
Web App Attack
🇬🇧
Aetherweb Ark
2026-08-28 13:17:47
(12 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.65.241.184 (CH/Switzerland/184.241.65.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.65.241.184 (CH/Switzerland/184.241.65.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇩🇪
Viveronese
2026-08-28 12:23:53
(13 hours ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 12:02:47
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 08:02:39.320540 2026] [security2:error] [pid 31332:tid 31353] [client 34.65.241.184:48010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.losersoftheyear.ceol.us"] [uri "/public/.git/config"] [unique_id "apF439IJLbbYmwMqD03WowAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-08-27 20:18:33
(1 day ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 17:24:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:24:22.850831 2026] [security2:error] [pid 13350:tid 13350] [client 34.65.241.184:42798] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "exit10band.com"] [uri "/www/.git/config"] [unique_id "apByxjB2N86g8dOVKskF-wAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
YF
2026-08-27 17:00:13
(1 day ago)
Git config exposure probe
Web App Attack
🇫🇮
oh.mg
2026-08-27 16:52:10
(1 day ago)
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /.git/config HTTP/1.1" 403 480 "-" "crusader-wor ...
show more
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /.git/config HTTP/1.1" 403 480 "-" "crusader-worker/1.0"
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /api/.git/config HTTP/1.1" 403 480 "-" "crusader-worker/1.0"
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /app/.git/config HTTP/1.1" 403 480 "-" "crusader-worker/1.0"
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /src/.git/config HTTP/1.1" 403 480 "-" "crusader-worker/1.0"
34.65.241.184 - - [27/Aug/2026:18:52:09 +0200] "GET /backend/.git/config HTTP/1.1" 403 480 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:12:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.65.241.184 (184.241.65.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:12:31.466441 2026] [security2:error] [pid 31361:tid 31361] [client 34.65.241.184:58512] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rodandreelpiercam.com"] [uri "/htdocs/.git/config"] [unique_id "apBh7wt_dR_59xSWfyarnQAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-08-27 15:44:01
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.65.241.184 (CH/Switzerland/Zurich/Zu ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.65.241.184 (CH/Switzerland/Zurich/Zurich/184.241.65.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
big-cloud.nl
2026-08-27 13:43:55
(1 day ago)
Try to access /site/.git/config
Web App Attack
🇫🇷
dynamix
2026-08-27 13:01:38
(1 day ago)
Multiple WAF Violations
Web App Attack