🇳🇱
homeshowdomain.nl
2026-06-10 22:00:35
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇳🇿
Antinson
2026-06-09 14:57:53
(2 days ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 13:17:45
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 09:17:40.268540 2026] [security2:error] [pid 17731:tid 17736] [client 34.87.132.231:51028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.soyjuantrece.com.emehache.net"] [uri "/.git/config"] [unique_id "aigSdGzFNsvuuznmimQZrAAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:47:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:47:46.166740 2026] [security2:error] [pid 32597:tid 32597] [client 34.87.132.231:56174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pictures.pittyvaich.com"] [uri "/.git/config"] [unique_id "aigLclVAx-VjOJzFZTD0pAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-06-09 12:30:04
(2 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.git/config
Web App Attack
🇨🇭
4server
2026-06-09 12:25:18
(2 days ago)
[TueJun0914:25:15.8416122026][security2:error][pid1056148:tid1056665][client34.87.132.231:0]ModSecur ...
show more
[TueJun0914:25:15.8416122026][security2:error][pid1056148:tid1056665][client34.87.132.231:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"webmail.mondo-it.ch\"][uri\"/.git/config\"][unique_id\"aigGK1HyVPi6sYbol3fXtQAAAFE\"]
show less
Hacking
Web App Attack
🇳🇿
Antinson
2026-06-09 11:24:59
(2 days ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ...
show more
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
show less
Bad Web Bot
🇬🇧
Swiptly
2026-06-09 07:06:29
(2 days ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 06:36:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:36:03.834048 2026] [security2:error] [pid 6654:tid 6654] [client 34.87.132.231:54692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "timcsite.com.woosterclassof64.com"] [uri "/.git/config"] [unique_id "aie0UyicU13tH5RMEwzNvgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-09 06:06:08
(2 days ago)
Trying to access config files
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:42:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:42:08.623585 2026] [security2:error] [pid 21455:tid 21455] [client 34.87.132.231:45380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "3rdid7thinf.org"] [uri "/.git/config"] [unique_id "aieZoHUDo1qCHAsGjg84qwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:37:03
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:36:57.677233 2026] [security2:error] [pid 24435:tid 24435] [client 34.87.132.231:57952] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "herston.org"] [uri "/.git/config"] [unique_id "aieKWbsfpDS_negLV4iswQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:19:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:19:46.489114 2026] [security2:error] [pid 26588:tid 26588] [client 34.87.132.231:44238] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nldi.us"] [uri "/.git/config"] [unique_id "aieGUhfKFYC_wzoIP15YNgAAAIQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 02:31:05
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.132.231 (231.132.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:30:58.316360 2026] [security2:error] [pid 3163:tid 3163] [client 34.87.132.231:50928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.gelatouno.com.salernospizza.com"] [uri "/.git/config"] [unique_id "aid64juNG7wiuAxWar5dHgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Lino Project
2026-06-09 02:19:00
(3 days ago)
34.87.132.231 - - [09/Jun/2026:04:18:56 +0200] "GET /.git/config HTTP/1.1" 403 3790 "-" "Mozilla/5.0 ...
show more
34.87.132.231 - - [09/Jun/2026:04:18:56 +0200] "GET /.git/config HTTP/1.1" 403 3790 "-" "Mozilla/5.0 (Linux; Android 9; COL-L29) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack