🇳🇱
homeshowdomain.nl
2026-08-31 22:01:55
(18 minutes ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-30.
show less
Web App Attack
SSH
Hacking
🇬🇧
consul.to
2026-08-31 17:09:19
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
yvoictra
2026-08-31 16:13:22
(6 hours ago)
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 13:35:58
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 09:35:51.237827 2026] [security2:error] [pid 16673:tid 16673] [client 35.204.251.177:35362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.longbowhunter.gnquivers.com"] [uri "/.git/config"] [unique_id "apWDN1qEsDMS-BzA9sheIQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 12:41:11
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:41:06.485550 2026] [security2:error] [pid 15111:tid 15111] [client 35.204.251.177:47128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.londongroup.internetnameregistration.com"] [uri "/.git/config"] [unique_id "apV2Yl7VqJIv35eyfSzA6gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-31 09:41:07
(12 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪
Bedios GmbH
2026-08-31 09:21:31
(12 hours ago)
Login credentials theft attempt
Hacking
🇲🇾
Rizzy
2026-08-31 08:31:48
(13 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 07:12:45
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 03:12:38.708543 2026] [security2:error] [pid 26834:tid 26837] [client 35.204.251.177:56628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.logedeparfaits.com.aafm.us"] [uri "/.git/config"] [unique_id "apUpZtj_brRzjOZolZxmLAAAAIE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:50:07
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:49:59.427895 2026] [security2:error] [pid 21685:tid 21685] [client 35.204.251.177:32856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.log.oxfordgliding.com"] [uri "/.git/config"] [unique_id "apUkF364khxAMoJgoqH1GAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-08-31 06:20:05
(16 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-31 05:57:18
(16 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
2026-08-31 05:03:55
(17 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
its101
2026-08-31 05:00:34
(17 hours ago)
Automated detection by LockdownAccess security system. Attack type(s): git_exposure, env_grab, websh ...
show more
Automated detection by LockdownAccess security system. Attack type(s): git_exposure, env_grab, webshell, framework_probe, mail_probe, wp_probe, config_probe. Reason: Nginx: git_exposure attack. Path targeted: unknown. Blocked in Cloudflare.
show less
Web App Attack
Exploited Host
🇺🇸
TPI-Abuse
2026-08-31 04:59:25
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.204.251.177 (177.251.204.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 00:59:18.850060 2026] [security2:error] [pid 17355:tid 17355] [client 35.204.251.177:36858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lockdownclaim.bamedica.com"] [uri "/.git/config"] [unique_id "apUKJkRuOmmamL8QoLvXzgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack