🇳🇱
homeshowdomain.nl
2026-06-18 22:05:47
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-17.
show less
Web App Attack
SSH
Hacking
🇺🇸
mnsf
2026-06-18 01:10:28
(1 week ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
slay3r9903
2026-06-17 20:46:01
(1 week ago)
IP address blocked by Cloudflare security rules due to suspicious activity and security violations.
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-17 20:43:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 16:43:31.640112 2026] [security2:error] [pid 412:tid 412] [client 34.81.191.250:52400] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "slc.com.gt"] [uri "/.git/config"] [unique_id "ajMG82OP3cPuuiI9xt1h-gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 20:27:19
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 16:27:14.877111 2026] [security2:error] [pid 26875:tid 26875] [client 34.81.191.250:59704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skyesongtollers.com"] [uri "/.git/config"] [unique_id "ajMDIs7LFD6hGPGVN1ISrQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
SkyDancer
2026-06-17 20:26:27
(1 week ago)
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by Sk ...
show more
Multiple unauthorized attempts to access using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-Vx
show less
Hacking
Brute-Force
SSH
🇵🇱
skoczo
2026-06-17 20:15:39
(1 week ago)
Honeytoken tripped (detected by https://github.com/skoczo/repgate): /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 20:08:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 16:08:30.535375 2026] [security2:error] [pid 17649:tid 17649] [client 34.81.191.250:50968] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "skintormint.com"] [uri "/.git/config"] [unique_id "ajL-viKUX7U5jg9FdXK5ZgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-17 20:04:05
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-06-17 20:02:04
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-06-17 19:59:04
(1 week ago)
Bot / scanning and/or hacking attempts: GET /.git/config HTTP/1.1
Hacking
Web App Attack
2026-06-17 19:45:01
(1 week ago)
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
polycoda
2026-06-17 19:43:02
(1 week ago)
⌨️ Probes for /.git/config everywhere
Hacking
Web App Attack
🇬🇧
consul.to
2026-06-17 19:34:40
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-06-17 18:50:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.191.250 (250.191.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 17 14:50:04.494063 2026] [security2:error] [pid 24813:tid 24813] [client 34.81.191.250:56878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "travelingguitarfoundation.org"] [uri "/.git/config"] [unique_id "ajLsXNOKp8Qi7Fy8ooBctQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack