๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:02:33
(21 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
lnklnx
2026-06-09 14:19:02
(1 day ago)
quiddler.lnklnx.com:443 35.187.74.0 - - [09/Jun/2026:09:18:59 -0500] "GET /.git/config HTTP/1.1" 404 ...
show more
quiddler.lnklnx.com:443 35.187.74.0 - - [09/Jun/2026:09:18:59 -0500] "GET /.git/config HTTP/1.1" 404 4090 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.42 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 09:36:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:36:16.824065 2026] [security2:error] [pid 29247:tid 29247] [client 35.187.74.0:48662] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "97films.media"] [uri "/.git/config"] [unique_id "aifekMkZTqilNDVAoYiLXgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-06-09 08:15:44
(1 day ago)
[TueJun0910:15:41.9522212026][security2:error][pid2595524:tid2595586][client35.187.74.0:0]ModSecurit ...
show more
[TueJun0910:15:41.9522212026][security2:error][pid2595524:tid2595586][client35.187.74.0:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"specialfood.ch\"][uri\"/.git/config\"][unique_id\"aifLrS7qJLJr3lpbDM1cdwAAAIE\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
pltcldvlpr
2026-06-09 08:14:39
(1 day ago)
CMS/framework probe: 35.187.74.0 - - [09/Jun/2026:10:14:38 +0200] "GET /.git/config HTTP/1.1" 301 17 ...
show more
CMS/framework probe: 35.187.74.0 - - [09/Jun/2026:10:14:38 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.2.455 Yowser/2.5 Safari/537.36" asn=396982 org="Google LLC" country=BE
...
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:42:32
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:42:25.962786 2026] [security2:error] [pid 1011:tid 1011] [client 35.187.74.0:55012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "madandproud.com"] [uri "/.git/config"] [unique_id "aie10Q6CmTXRs9BniUV8OgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 06:01:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:00:57.752790 2026] [security2:error] [pid 28644:tid 28658] [client 35.187.74.0:39232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adventistdeathconfusion.com.mylordsday.com"] [uri "/.git/config"] [unique_id "aiesGXq07C-rLiB71VWHeQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
EmK530
2026-06-09 03:24:54
(1 day ago)
URL flagged by RegEx: /.git/config
Web App Attack
๐ฉ๐ช
Ba-Yu
2026-06-09 03:17:40
(1 day ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 03:06:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:05:59.951239 2026] [security2:error] [pid 21513:tid 21513] [client 35.187.74.0:46642] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fractalsky.com"] [uri "/.git/config"] [unique_id "aieDF9Apb35a3_OZWvicUwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 02:25:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 35.187.74.0 (0.74.187.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 22:25:49.133239 2026] [security2:error] [pid 23360:tid 23360] [client 35.187.74.0:40000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.globaldentalservices.com"] [uri "/.git/config"] [unique_id "aid5rUdyaGJ3hOLyoFEMOQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
2000cn.com.au
2026-06-09 01:19:32
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-06-09 00:22:23
(1 day ago)
35.187.74.0 - - [09/Jun/2026:00:22:22 +0000] "GET /.git/config HTTP/1.1" 302 3333 "-" "Mozilla/5.0 ( ...
show more
35.187.74.0 - - [09/Jun/2026:00:22:22 +0000] "GET /.git/config HTTP/1.1" 302 3333 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.26 Safari/537.36 Core/1.63.5977.400 LBBROWSER/10.1.3752.400"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:05:17
(1 day ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐ฉ๐ช
big-cloud.nl
2026-06-08 19:12:45
(2 days ago)
Try to access /.git/config
Web App Attack