🇺🇸
alecj.com
2026-06-26 02:01:39
(16 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇮🇹
clamehost.it
2026-06-26 02:00:52
(16 hours ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇩🇪
EGP Abuse Dept
2026-06-26 01:42:21
(17 hours ago)
Scanning for web/db/file exploits on shop.novykesteren.nl.mach3shop.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 01:42:01
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:41:57.923421 2026] [security2:error] [pid 27212:tid 27212] [client 34.81.56.130:42880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "medicalexchangeasinc.com.hellomdinc.com"] [uri "/v2/.git/config"] [unique_id "aj3Y5R_yLTCrtnAEpbipPAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 00:56:28
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:56:24.260298 2026] [security2:error] [pid 6975:tid 6975] [client 34.81.56.130:41318] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danged.com"] [uri "/v1/.git/config"] [unique_id "aj3OOL3lMPkejcYPCeykkAAAAFA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-26 00:18:20
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 20:18:14.982683 2026] [security2:error] [pid 26454:tid 26471] [client 34.81.56.130:57156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.41bravo.com"] [uri "/www/.git/config"] [unique_id "aj3FRirHLK2lFXY9A5eocAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-26 00:02:17
(18 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
inlink.ltd
2026-06-25 23:33:59
(19 hours ago)
dot file probe
Web App Attack
🇺🇸
TPI-Abuse
2026-06-25 23:23:33
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.56.130 (130.56.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 19:23:25.835478 2026] [security2:error] [pid 9290:tid 9290] [client 34.81.56.130:42776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pswebsite.com"] [uri "/htdocs/.git/config"] [unique_id "aj24bWQvQZQLFndcs3HXvgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-06-25 22:48:27
(20 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-25 15:41:31
(1 day ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇳🇱
i-turnradio.nl
2026-06-25 15:23:30
(1 day ago)
2026-06-25 @ 17:23:30 (CET) ~ Blocked for trying to access: /src/.git/config
Web App Attack
🇧🇾
lns.bz
2026-06-25 14:26:53
(1 day ago)
Too many 404 requests [BY]
Web App Attack
🇬🇷
setupgr
2026-06-25 13:38:05
(1 day ago)
(mod_security) mod_security (id:11000011) triggered by 34.81.56.130 (TW/Taiwan/Taiwan/Taoyuan/-/[AS3 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.81.56.130 (TW/Taiwan/Taiwan/Taoyuan/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Thu Jun 25 16:38:00.467037 2026] [security2:error] [pid 358185:tid 358284] [client 34.81.56.130:52196] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 130.56.81.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "154.57.7.73"] [uri "/app/.git/config"] [unique_id "aj0vODpPCootS5mrGd4pzQAAAYo"]
show less
Port Scan