๐ณ๐ฑ
homeshowdomain.nl
2026-10-06 21:59:51
(11 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-05.
show less
Web App Attack
SSH
Hacking
๐ง๐ท
radardatelecom
2026-10-05 22:27:03
(1 day ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-05 22:00:30
(1 day ago)
Auto-ban: >3000 req/min op 2026-10-05
Web App Attack
SSH
Hacking
๐บ๐ธ
mnsf
2026-10-05 21:05:18
(1 day ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 20:01:33
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 16:01:28.715061 2026] [security2:error] [pid 2177:tid 2177] [client 35.219.183.122:47966] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.summit1000.group.smartstylehair.com"] [uri "/.git/config"] [unique_id "asQCGIbQOxQTfbbTCfpsnwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-05 17:02:12
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
raph
2026-10-05 16:14:49
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 16:09:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 12:09:43.100300 2026] [security2:error] [pid 22813:tid 22847] [client 35.219.183.122:37558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sue.n2play.net"] [uri "/.git/config"] [unique_id "asPLx25YFzTE8kISHadvZgAAARc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-05 15:31:14
(1 day ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+1 more) | ua: Mozilla/5.0 ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+1 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 14:56:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:56:51.605149 2026] [security2:error] [pid 15991:tid 15991] [client 35.219.183.122:41680] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.substack.diegolaje.com"] [uri "/.git/config"] [unique_id "asO6s5dKQ787WZ07dp7v1AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 14:31:34
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.219.183.122 (122.183.219.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 10:31:28.770710 2026] [security2:error] [pid 11866:tid 11866] [client 35.219.183.122:55578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sublimationconsultants.ipostsocialmedia.com"] [uri "/.git/config"] [unique_id "asO0wPEXkBZNK2dbGuc9AgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-05 12:09:49
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status, wp_admin. Observed by 1 sensor(s); 213 hits.
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-05 12:05:51
(1 day ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.219.183.122 - - [05/Oct/2026:14:05:32 +0200] "GET /.git/config HTTP/1.1" 301 627 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-05 10:47:09
(1 day ago)
106 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
Anonymous
2026-10-05 10:35:20
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking