๐ณ๐ฑ
homeshowdomain.nl
2026-06-09 22:03:16
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
๐ฉ๐ช
bescared
2026-06-09 11:19:13
(1 week ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 07:39:30
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:39:25.879681 2026] [security2:error] [pid 5114:tid 5114] [client 35.192.54.23:47556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.janeeyrecollection.com.janeeyreillustrated.com"] [uri "/.git/config"] [unique_id "aifDLV7b1JH-djqn-UUITgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
ne1for23
2026-06-09 06:08:38
(1 week ago)
Attempting to probe for sensitive information accidently exposed via git config.
35.192.54.23 - - [ ...
show more
Attempting to probe for sensitive information accidently exposed via git config.
35.192.54.23 - - [09/Jun/2026:06:08:38 +0000] "GET /.git/config HTTP/1.1" 403 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.5; rv:10.0.1) Gecko/20100101 Firefox/10.0.1 SeaMonkey/2.7.1"
show less
Hacking
๐บ๐ธ
TPI-Abuse
2026-06-09 04:19:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:19:04.731016 2026] [security2:error] [pid 19598:tid 19598] [client 35.192.54.23:39252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "credenda.com"] [uri "/.git/config"] [unique_id "aieUOGiYw1O6pggpOg5nTgAAACE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-06-09 03:38:16
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.192.54.23 (US/United States/23.54. ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 35.192.54.23 (US/United States/23.54.192.35.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
๐บ๐ธ
interbiznw.com
2026-06-09 02:45:41
(1 week ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-09 00:16:10
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 20:16:03.890833 2026] [security2:error] [pid 24283:tid 24283] [client 35.192.54.23:33964] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cams.boens.org"] [uri "/.git/config"] [unique_id "aidbQxEsE36csNbweqcvoQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-08 22:01:03
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-08
Web App Attack
SSH
Hacking
๐ง๐ช
voormedia
2026-06-08 19:41:59
(1 week ago)
Accessed trap at '/.git/config'
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 19:34:49
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 15:34:43.381073 2026] [security2:error] [pid 7680:tid 7680] [client 35.192.54.23:53178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tracklocross.com"] [uri "/.git/config"] [unique_id "aicZUynlN1ryqCmszsekKgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-08 17:17:29
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 35.192.54.23 (23.54.192.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 13:17:25.503299 2026] [security2:error] [pid 10838:tid 10923] [client 35.192.54.23:44752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.booking.heworeblack.com"] [uri "/.git/config"] [unique_id "aib5JYEIzUo_sHBIfuSfugAAAcw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-08 14:40:01
(1 week ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
MPL
2026-06-08 09:27:03
(1 week ago)
tcp ports: 80,443 (24 or more attempts)
Port Scan
Anonymous
2026-06-08 09:01:54
(1 week ago)
35.192.54.23 - - [08/Jun/2026:09:01:53 +0000] "GET /.git/config HTTP/1.1" 404 49524 "-" "Mozilla/5.0 ...
show more
35.192.54.23 - - [08/Jun/2026:09:01:53 +0000] "GET /.git/config HTTP/1.1" 404 49524 "-" "Mozilla/5.0 (Linux; Android 9; SM-J701F) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack