🇳🇱
homeshowdomain.nl
2026-06-10 22:01:17
UTC ·
(5 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
Web App Attack
SSH
Hacking
🇩🇪
Lino Project
2026-06-09 13:18:14
UTC ·
(5 months ago)
34.92.248.5 - - [09/Jun/2026:15:18:10 +0200] "GET /.git/config HTTP/1.1" 301 4141 "-" "ELinks/0.9.3 (textmode; Linux 2.6.9-kanotix-8 i686; 127x41)"
...
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:54:48
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:54:41.955948 2026] [security2:error] [pid 23238:tid 2323 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:54:41.955948 2026] [security2:error] [pid 23238:tid 23238] [client 34.92.248.5:33108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.numbularycom.numbulary.org"] [uri "/.git/config"] [unique_id "aigNEX5xWDOAjViabQvINgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 11:09:55
UTC ·
(5 months ago)
34.92.248.5 - - [09/Jun/2026:08:09:54 -0300] "GET /.git/config HTTP/1.1" 403 874 "-" "Mozilla/5.0 (Linux; Android 9; ANE-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.157 Mobile Safari/537.36"
...
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
🇺🇸
TPI-Abuse
2026-06-09 06:11:14
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:11:07.597179 2026] [security2:error] [pid 30799:tid 3079 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:11:07.597179 2026] [security2:error] [pid 30799:tid 30799] [client 34.92.248.5:60832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vintagetejas.com"] [uri "/.git/config"] [unique_id "aieue2NMteQNpiuB0Xt7EQAAAD8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
Valhalla
2026-06-09 04:39:34
UTC ·
(5 months ago)
/.git/config
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:51:16
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:51:10.689459 2026] [security2:error] [pid 29181:tid 2918 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:51:10.689459 2026] [security2:error] [pid 29181:tid 29181] [client 34.92.248.5:51112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idodat.com"] [uri "/.git/config"] [unique_id "aieNrspEv5p2SJWVCKKM6gAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-09 02:40:37
UTC ·
(5 months ago)
34.92.248.5 - - [09/Jun/2026:02:40:36 +0000] "GET /.git/config HTTP/1.1" 404 2814 "-" "UCWEB/8.8 (iPhone; CPU OS_6; en-US)AppleWebKit/534.1 U3/3.0.0 Mobile"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 01:30:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:30:09.133620 2026] [security2:error] [pid 12799:tid 1279 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 21:30:09.133620 2026] [security2:error] [pid 12799:tid 12799] [client 34.92.248.5:41794] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hazardrecords.org.ankitoner.com"] [uri "/.git/config"] [unique_id "aidsoYJFsUIJqNRfGPlgcgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-09 00:17:07
UTC ·
(5 months ago)
Scanning/Probing (43)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 13:01:39
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 09:01:32.003993 2026] [security2:error] [pid 2068:tid 2068] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.92.248.5 (5.248.92.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 09:01:32.003993 2026] [security2:error] [pid 2068:tid 2068] [client 34.92.248.5:45806] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.busybconstruction.ewingmissouri.com"] [uri "/.env.test"] [unique_id "aia9LLJ2jGYkQB67rrDNMAAAAGg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-06-08 12:46:56
UTC ·
(5 months ago)
URL Probing: /backend/.env
Web App Attack
🇸🇪
konseptit
2026-06-08 11:36:23
UTC ·
(5 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.92.248.5 (HK/Hong Kong/5.248.92.34.bc.googleusercontent.com)
SQL Injection
🇨🇭
backslash
2026-06-08 10:42:17
UTC ·
(5 months ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇺🇸
infra-monitor
2026-06-08 09:00:05
UTC ·
(5 months ago)
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, crowdsecurity/http-sensitive-files
Port Scan
Web App Attack