๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:03:21
(3 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ท๐ด
INTEQ
2026-06-09 15:51:51
(9 hours ago)
Web attack from 34.76.23.205
Web App Attack
๐ฌ๐ง
Oakley
2026-06-09 15:13:08
(10 hours ago)
(confirmed_bot_sig) Confirmed bot
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 15:04:37
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:04:30.231101 2026] [security2:error] [pid 17953:tid 17953] [client 34.76.23.205:40128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.amazedbyu.com.dcmillerjr.com"] [uri "/.git/config"] [unique_id "aigrfj1fmK9KdXjbgcJuBQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-09 14:14:04
(11 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 12:47:23
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:47:20.073332 2026] [security2:error] [pid 29353:tid 29353] [client 34.76.23.205:47222] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "boyt.org"] [uri "/.git/config"] [unique_id "aigLWBWih0sAJaqImSy_DAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:50:48
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:50:42.587049 2026] [security2:error] [pid 28931:tid 28931] [client 34.76.23.205:55282] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "app.handyrehab.com"] [uri "/.git/config"] [unique_id "aif-EvlxNn8PdmwqpKB0oQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 11:00:21
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:00:12.836770 2026] [security2:error] [pid 4542:tid 4542] [client 34.76.23.205:33458] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.blackhillsinfosec.org.mphq.net"] [uri "/.git/config"] [unique_id "aifyPLw6Uj9XbmAO9l4TqQAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-09 10:25:41
(15 hours ago)
[TueJun0912:25:39.0803142026][security2:error][pid2751420:tid2751488][client34.76.23.205:0]ModSecuri ...
show more
[TueJun0912:25:39.0803142026][security2:error][pid2751420:tid2751488][client34.76.23.205:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"rs-gaming.net\"][uri\"/.git/config\"][unique_id\"aifqI53Aaw2BRrvTFo_cDQAAAE4\"]
show less
Port Scan
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:38:58
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:38:50.037744 2026] [security2:error] [pid 29480:tid 29480] [client 34.76.23.205:58674] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "instagenii.com"] [uri "/.git/config"] [unique_id "aiffKlj2oS8BbQLbpdqC_QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Charlesiv
2026-06-09 08:01:25
(17 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from BE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /.git/config
Timestamp: 2026-06-09T06:24:40Z
Ray ID: a08e0dfe9b2302b1
UA: Mozilla/5.0 (Linux; U; Android 9; en-US; RMX1851 Build/PKQ1.190101.001) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.12.8.1206 Mobile Safari/537.36
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-09 06:32:58
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:32:53.567025 2026] [security2:error] [pid 27959:tid 27959] [client 34.76.23.205:51816] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stat-alliance.com"] [uri "/.git/config"] [unique_id "aiezlSb9pUNgiGl0Qoy8DgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 05:12:53
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 01:12:47.976506 2026] [security2:error] [pid 12235:tid 12235] [client 34.76.23.205:32870] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "syvox.net"] [uri "/.git/config"] [unique_id "aiegz0SYjXUvsupokVDXJgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 04:06:51
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:06:47.958847 2026] [security2:error] [pid 14527:tid 14527] [client 34.76.23.205:43136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nelsonroman.com"] [uri "/.git/config"] [unique_id "aieRV2sTdXi-PRdwVcSzpAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 20:47:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.76.23.205 (205.23.76.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 16:47:47.412991 2026] [security2:error] [pid 20138:tid 20748] [client 34.76.23.205:33088] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.igedac.com"] [uri "/.git/config"] [unique_id "aicqc3aeWWDhNKXb547DEgAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack