🇳🇱
homeshowdomain.nl
2026-06-14 22:00:44
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-13.
show less
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-06-13 22:02:43
(2 days ago)
Auto-ban: >3000 req/min op 2026-06-13
Web App Attack
SSH
Hacking
🇩🇪
4server
2026-06-13 16:20:57
(2 days ago)
[SatJun1318:20:54.2828242026][security2:error][pid1365350:tid1365440][client35.201.29.219:0]ModSecur ...
show more
[SatJun1318:20:54.2828242026][security2:error][pid1365350:tid1365440][client35.201.29.219:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"allegraravizza.it\"][uri\"/.git/config\"][unique_id\"ai2DZp1cqgQu1de9gMMJDwAAAME\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 08:24:24
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 04:24:19.721461 2026] [security2:error] [pid 32249:tid 32249] [client 35.201.29.219:33164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gonzalez.com"] [uri "/.git/config"] [unique_id "ai0TswEW8mTHIevl_7ebxgAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-06-13 07:06:36
(3 days ago)
Abuse Detected (1)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 06:49:38
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:49:32.948447 2026] [security2:error] [pid 18037:tid 18037] [client 35.201.29.219:60732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rimworld.com"] [uri "/.git/config"] [unique_id "aiz9fNDn9OaJZX40UtV6NAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-13 06:20:01
(3 days ago)
suspicious request in access.log
Web App Attack
🇨🇭
TheCoon
2026-06-13 06:15:01
(3 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-13 06:07:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 02:07:01.702486 2026] [security2:error] [pid 19785:tid 19785] [client 35.201.29.219:44128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "xmlprotocol.com"] [uri "/.git/config"] [unique_id "aizzhRs64uIdbUDe1tz_gwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 05:48:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:48:42.029852 2026] [security2:error] [pid 7786:tid 7786] [client 35.201.29.219:56344] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.montymilburn.com"] [uri "/.git/config"] [unique_id "aizvOltEWdDXCoh2gDmZmQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-13 05:13:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.201.29.219 (219.29.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 01:13:23.164096 2026] [security2:error] [pid 24867:tid 24867] [client 35.201.29.219:46548] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "celltechs.net"] [uri "/.git/config"] [unique_id "aizm87zt18QztfBbxr1iYgAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack