🇳🇱
homeshowdomain.nl
2026-06-15 22:01:43
(20 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇷🇴
iulianh
2026-06-15 09:27:17
(1 day ago)
*
Brute-Force
SSH
🇩🇪
paissangroup
2026-06-15 08:49:08
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 08:17:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 04:16:59.078858 2026] [security2:error] [pid 4925:tid 4925] [client 34.93.5.110:37858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "californiacbcdelegation.com"] [uri "/api/.git/config"] [unique_id "ai-0-6b56CxHDG00uFbT9gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
seal
2026-06-15 08:04:56
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
SSH
Brute-Force
🇬🇧
consul.to
2026-06-15 08:01:41
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
pltcldvlpr
2026-06-15 07:06:21
(1 day ago)
CMS/framework probe: 34.93.5.110 - - [15/Jun/2026:09:06:07 +0200] "GET /static/.git/config HTTP/1.1" ...
show more
CMS/framework probe: 34.93.5.110 - - [15/Jun/2026:09:06:07 +0200] "GET /static/.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2869.0 Safari/537.36" asn=396982 org="Google LLC" country=IN
...
show less
Web App Attack
🇨🇭
ca
2026-06-15 06:54:22
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-15 05:57:11
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:57:08.283348 2026] [security2:error] [pid 31317:tid 31317] [client 34.93.5.110:55992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.pronio.com"] [uri "/backend/.git/config"] [unique_id "ai-UNKvhhxKx6Mu0NtbgLgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
nate naten
2026-06-15 05:45:30
(1 day ago)
HoneyTrap: git_config attempt on /.git/config from India
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:24:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:24:20.715326 2026] [security2:error] [pid 20830:tid 20830] [client 34.93.5.110:53110] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krakowski.org"] [uri "/src/.git/config"] [unique_id "ai-MhOs8EMTgQbIrmJE2cgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-15 04:23:23
(1 day ago)
Unauthorized access to webpage admin
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 03:52:28
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.5.110 (110.5.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 23:52:22.172124 2026] [security2:error] [pid 16648:tid 16648] [client 34.93.5.110:36706] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "diamenty.info"] [uri "/src/.git/config"] [unique_id "ai929r_VYxq7n1_09kNr-AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-06-15 03:45:11
(1 day ago)
Web App Attack
🇳🇿
Antinson
2026-06-15 02:17:32
(1 day ago)
High error rate and elevated request volume targeting cPanel servers
Bad Web Bot