🇬🇧
AvonleaConsulting
2026-06-09 22:59:43
(4 days ago)
Attempts to probe web pages for vulnerable PHP or other applications
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-09 22:03:28
(4 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇬🇧
AvonleaConsulting
2026-06-09 15:19:28
(5 days ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 13:06:44
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:06:38.007977 2026] [security2:error] [pid 7495:tid 7495] [client 34.74.2.194:34676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.anythingsoldworldwide.deckmasterscompany.com"] [uri "/.git/config"] [unique_id "aigP3gVWp8Mf_ehP_aeJzwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:39:56
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:39:48.849374 2026] [security2:error] [pid 29399:tid 29399] [client 34.74.2.194:54640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.impactventuresllc.com"] [uri "/.git/config"] [unique_id "aigJlAMaqJpxWa29wYUiYQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-06-09 11:39:55
(5 days ago)
6.958 requests with url.path *.git/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 11:07:18
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:07:12.763958 2026] [security2:error] [pid 10467:tid 10467] [client 34.74.2.194:39348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "5995.us"] [uri "/.git/config"] [unique_id "aifz4K4I8VoYpxLqGc7iUQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 07:46:34
(5 days ago)
[TueJun0909:46:27.4769132026][security2:error][pid74049:tid74395][client34.74.2.194:0]ModSecurity:Ac ...
show more
[TueJun0909:46:27.4769132026][security2:error][pid74049:tid74395][client34.74.2.194:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"proeditum.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"aifE0zbbZHOnIWODSuhZgAAAAMs\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:29:07
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:29:04.264317 2026] [security2:error] [pid 27186:tid 27186] [client 34.74.2.194:60130] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.isaiah.byles.net"] [uri "/.git/config"] [unique_id "aifAwLCrbOTMcK4FqXgF3gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇽
octageeks.com
2026-06-09 04:19:39
(5 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇺🇸
NXTwoThou
2026-06-09 04:08:22
(5 days ago)
/.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:07:44
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:07:39.435199 2026] [security2:error] [pid 6604:tid 6604] [client 34.74.2.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.mail-pmg.com"] [uri "/.git/config"] [unique_id "aieRi3SuvQs-cuy9lFs0EAAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:52:11
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.2.194 (194.2.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:52:07.321934 2026] [security2:error] [pid 12801:tid 12801] [client 34.74.2.194:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.distro.media"] [uri "/.git/config"] [unique_id "aid_18-ROLo0hV75IIBYAQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
OceanTreasure
2026-06-09 01:35:37
(5 days ago)
tcp/443; Git configuration exposure attempt: "GET /.git/config" @ 2026-06-09T01:28:52Z [proxy]
Web App Attack
🇷🇺
OK
2026-06-09 01:33:13
(5 days ago)
HTTP/HTTPS
Hacking
Web App Attack