🇳🇱
homeshowdomain.nl
2026-08-28 22:02:08
(43 minutes ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-27.
show less
Web App Attack
SSH
Hacking
2026-08-28 00:01:15
(22 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-08-27 20:39:17
(1 day ago)
[dev.backorder.gr] httpd-config-scan: sites=global; logs=/var/log/nginx/access.log; samples=/.git/co ...
show more
[dev.backorder.gr] httpd-config-scan: sites=global; logs=/var/log/nginx/access.log; samples=/.git/config | /src/.git/config | /app/.git/config
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 18:32:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:32:20.522595 2026] [security2:error] [pid 10615:tid 10615] [client 34.70.177.99:56938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.cdalakefrontcabin.com"] [uri "/.git/config"] [unique_id "apCCtAKFa7HZ1czruyslKgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-08-27 18:03:56
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /public/.git/config (+9 more) | 2026-08-27 18:03 UTC
show less
Hacking
Web App Attack
2026-08-27 17:05:42
(1 day ago)
PSCSERV WPSCAN 34.70.177.99
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 15:43:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 11:43:46.498791 2026] [security2:error] [pid 24248:tid 24248] [client 34.70.177.99:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "backend.grainavi.com"] [uri "/api/.git/config"] [unique_id "apBbMpmABglugg4F1OB_kAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 14:38:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:38:00.471474 2026] [security2:error] [pid 26166:tid 26166] [client 34.70.177.99:49880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bestfriendz.us"] [uri "/api/.git/config"] [unique_id "apBLyKTqiqooadvHcnxvAgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
kosada.com
2026-08-27 14:15:55
(1 day ago)
Web vulnerability probing: /var/www/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 12:39:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 08:39:20.012653 2026] [security2:error] [pid 11482:tid 11482] [client 34.70.177.99:58622] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "legalnexusbali.legalnexuslawfirm.com"] [uri "/www/.git/config"] [unique_id "apAv-B6CJ33Pm2TZ3A44vAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-27 11:52:05
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 10:50:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.70.177.99 (99.177.70.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:50:35.714378 2026] [security2:error] [pid 28397:tid 28411] [client 34.70.177.99:47244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "traceyschaper.com"] [uri "/backend/.git/config"] [unique_id "apAWe5bYOYXqFhhpL4QE2wAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-27 10:29:23
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking