🇳🇱
homeshowdomain.nl
2026-06-15 22:00:45
(8 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-15 09:16:46
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 05:16:42.253870 2026] [security2:error] [pid 16484:tid 16484] [client 34.87.108.201:44306] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.drunkenmonkeystyle.com"] [uri "/frontend/.git/config"] [unique_id "ai_C-lpS1bmgHeydZ_EMuwAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-15 07:48:35
(22 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:51:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:51:48.052358 2026] [security2:error] [pid 16675:tid 16675] [client 34.87.108.201:43864] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resume.numeralla.com"] [uri "/wp-content/.git/config"] [unique_id "ai-S9CTzHrrK0f0xMx3YvQAAAC4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-15 05:42:02
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
2026-06-15 05:40:30
(1 day ago)
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /app/.git/config HTTP/1.1" ...
show more
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /app/.git/config HTTP/1.1" 404 3164
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /backend/.git/config HTTP/1.1" 404 3163
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /frontend/.git/config HTTP/1.1" 404 3163
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /src/.git/config HTTP/1.1" 404 3164
34.87.108.201 - [14/Jun/2026:22:40:29 -0700] family.idavoll.dynu.net "GET /api/.git/config HTTP/1.1" 404 3164
...
show less
Web App Attack
🇨🇦
polycoda
2026-06-15 05:00:55
(1 day ago)
AutoBlock: ⚙️ Configuration File Access (Non Decay-Based)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 02:13:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 22:13:34.400570 2026] [security2:error] [pid 26724:tid 26724] [client 34.87.108.201:44728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "armadillosigns.com"] [uri "/.git/config"] [unique_id "ai9fzs3nlUtdfrawIUpHBgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:52:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:52:03.731436 2026] [security2:error] [pid 6901:tid 6901] [client 34.87.108.201:54850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jjhfamily.com"] [uri "/code/.git/config"] [unique_id "ai9aw3VVBxHl2kqQV3iK5wAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-06-15 01:51:46
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇦🇹
René Hickersberger
2026-06-15 01:42:54
(1 day ago)
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Symbian/3; Series60/5.2 ...
show more
malicious bot detected: violations="hit-honeypot"; user_agent="Mozilla/5.0 (Symbian/3; Series60/5.2 NokiaC7-00/012.003; Profile/MIDP-2.1 Configuration/CLDC-1.1 ) AppleWebKit/525 (KHTML, like Gecko) Version/3.0 BrowserNG/7.2.7.3 3gpp-gba"
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:55:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:55:03.613708 2026] [security2:error] [pid 3408:tid 3408] [client 34.87.108.201:54854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "allseniorsolutions.com"] [uri "/backend/.git/config"] [unique_id "ai9NZ56QOpMS_Gp5UwrR1gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 00:07:26
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.108.201 (201.108.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:07:21.526358 2026] [security2:error] [pid 16483:tid 16483] [client 34.87.108.201:37098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesmsmall.com"] [uri "/api/.git/config"] [unique_id "ai9COax_U2qpADoMB1UNDwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-14 23:45:14
(1 day ago)
20 attempts against mh_ha-misbehave-ban on ec102967
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-06-14 22:00:09
(1 day ago)
Web App Attack