π³π±
homeshowdomain.nl
2026-06-27 22:01:02
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-26.
show less
Web App Attack
SSH
Hacking
πΊπΈ
arirabinowitz.com
2026-06-26 12:59:00
(4 days ago)
34.85.45.77 - - [25/Jun/2026:13:04:12 -0400] "GET /.git/config HTTP/1.1" 404 29326 "-" "Mozilla/5.0 ...
show more
34.85.45.77 - - [25/Jun/2026:13:04:12 -0400] "GET /.git/config HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Linux; Android 7.0; YS900) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.136 Iron Safari/537.36"
34.85.45.77 - - [25/Jun/2026:13:04:12 -0400] "GET /admin/.git/config HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Linux; Android 8.0.0; Pixel XL Build/OPR6.170623.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.107 Mobile Safari/537.36"
34.85.45.77 - - [25/Jun/2026:13:04:12 -0400] "GET /api/.git/config HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (Linux; Android 9; moto x4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.85.45.77 - - [25/Jun/2026:13:04:12 -0400] "GET /app/.git/config HTTP/1.1" 404 29326 "-" "Mozilla/5.0 (X11; Linux i686) AppleWebKit/535.2 (KHTML, like Gecko) Ubuntu/11.10 Chromium/15.0.874.120 Chrome/15.0.874.120 Safari/535.2"
show less
Web App Attack
Hacking
π§πͺ
sid3windr
2026-06-26 07:42:58
(4 days ago)
GET /wp-content/.git/config (Tarpitted for 14h52m56s, wasted 3.07MB)
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-26 02:10:35
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.85.45.77 (77.45.85.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.45.77 (77.45.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 22:10:28.999932 2026] [security2:error] [pid 3852:tid 3878] [client 34.85.45.77:46864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.metastrata.plumeraproductions.com"] [uri "/blog/.git/config"] [unique_id "aj3flIBsatUEqC4J8zkBVgAAARg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
raph
2026-06-26 02:09:57
(4 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
π¨π
4server
2026-06-26 01:28:27
(4 days ago)
[FriJun2603:28:21.1673462026][security2:error][pid2164103:tid2164126][client34.85.45.77:0]ModSecurit ...
show more
[FriJun2603:28:21.1673462026][security2:error][pid2164103:tid2164126][client34.85.45.77:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"365\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"mondo-it.ch.81-17-25-250.cpanel.site\"][uri\"/site/.git/config\"][unique_id\"aj3VtbjiU3BBTmKoycIcRwAAANU\"]
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-06-26 01:05:54
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.85.45.77 (77.45.85.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.85.45.77 (77.45.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 25 21:05:47.645921 2026] [security2:error] [pid 15858:tid 15858] [client 34.85.45.77:53532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "houstoun.me"] [uri "/api/.git/config"] [unique_id "aj3Qa2f2P-tIT6vqcn1TCgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π«π·
dynamix
2026-06-25 23:22:29
(4 days ago)
Multiple WAF Violations
Web App Attack
π³π±
Yachiyo Runami
2026-06-25 22:59:59
(4 days ago)
18x Web Scan (L7) | Paths: /www/.git/config, /v3/.git/config, /v2/.git/config, /v1/.git/config, /sta ...
show more
18x Web Scan (L7) | Paths: /www/.git/config, /v3/.git/config, /v2/.git/config, /v1/.git/config, /static/.git/config | Codes: 444(18x) | rDNS: 77.45.85.34.bc.googleusercontent.com | F2B/angie-path-trap@2026-06-25T22:59:59Z
show less
Bad Web Bot
Web App Attack
π©πͺ
Savvii
2026-06-25 16:59:06
(5 days ago)
20 attempts against mh-misbehave-ban on wind
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-06-25 16:00:32
(5 days ago)
20 attempts against mh-misbehave-ban on argon
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-06-25 13:47:42
(5 days ago)
20 attempts against mh_ha-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack