๐ณ๐ฑ
homeshowdomain.nl
2026-06-15 22:02:44
(23 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-15 05:37:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:37:07.153916 2026] [security2:error] [pid 20688:tid 20688] [client 35.187.247.218:51492] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chrisamedee.com"] [uri "/portal/.git/config"] [unique_id "ai-Pg_Bl42ozFnvo0AQ4LAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-15 04:49:49
(1 day ago)
[MonJun1506:49:47.3790292026][security2:error][pid3788818:tid3788886][client35.187.247.218:0]ModSecu ...
show more
[MonJun1506:49:47.3790292026][security2:error][pid3788818:tid3788886][client35.187.247.218:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"autodiscover.serban.ch\"][uri\"/htdocs/.git/config\"][unique_id\"ai-Ea7QIlTpZI9ViNxFwbgAAAEY\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-06-15 04:40:27
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-15 04:34:48
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 04:20:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 00:20:15.859305 2026] [security2:error] [pid 10250:tid 10250] [client 35.187.247.218:58698] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tomhatcher.us"] [uri "/api/.git/config"] [unique_id "ai99f6xNSPfx7btBN-YQKAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-06-15 02:25:26
(1 day ago)
Brute-force attack to identify web exploits
Brute-Force
Web App Attack
๐จ๐ญ
dalslab ltd
2026-06-15 02:10:22
(1 day ago)
[15/Jun/2026:04:10:21 +0200] - 422 422 - GET https vault.dalslab.com "/backend/.git/config" [Client ...
show more
[15/Jun/2026:04:10:21 +0200] - 422 422 - GET https vault.dalslab.com "/backend/.git/config" [Client 35.187.247.218] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (Linux; Android 9; Mi MIX 2S) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
[15/Jun/2026:04:10:21 +0200] - 422 422 - GET https vault.dalslab.com "/v1/.git/config" [Client 35.187.247.218] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (X11; U; Linux i686; en-US) AppleWebKit/532.8 (KHTML, like Gecko) Chrome/4.0.277.0 Safari/532.8" "-"
[15/Jun/2026:04:10:21 +0200] - 422 422 - GET https vault.dalslab.com "/app/.git/config" [Client 35.187.247.218] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "Mozilla/5.0 (Linux; Android 9; ONEPLUS A6003) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36" "-"
[15/Jun/2026:04:10:21 +0200] - 422 422 - GET https vault.dalslab.com "/api/.git/config" [Client 35.187.247.218] [Length 496] [Gzip -] [Sent-to 10.1.1.248] "
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
andypiper
2026-06-15 01:00:32
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-06-15 00:16:25
(1 day ago)
3.921 requests from abuseipdb.com blacklisted IP (1yr4mos1d)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-15 00:15:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:15:55.052848 2026] [security2:error] [pid 19338:tid 19338] [client 35.187.247.218:36328] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pixelgraphic.ichi51e.net"] [uri "/build/.git/config"] [unique_id "ai9EOzvNw1rSpa-8j59W0QAAAGo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SwinT
2026-06-15 00:00:16
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
Anonymous
2026-06-14 22:15:02
(1 day ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
ersei.net
2026-06-14 21:52:14
(1 day ago)
Nonstop scanning with no cooldown or respect for 429.
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-14 21:26:17
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.247.218 (218.247.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:26:09.566926 2026] [security2:error] [pid 26774:tid 26774] [client 35.187.247.218:39790] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "massingale.com"] [uri "/dashboard/.git/config"] [unique_id "ai8ccevILttvkVQDS3dXHQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack