🇳🇱
homeshowdomain.nl
2026-05-19 21:59:34
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-18.
show less
Web App Attack
SSH
Hacking
🇳🇱
homeshowdomain.nl
2026-05-18 21:59:43
(2 weeks ago)
Auto-ban: >3000 req/min op 2026-05-18
Web App Attack
SSH
Hacking
🇩🇪
sdos.es
2026-05-18 17:15:40
(2 weeks ago)
"Restricted File Access Attempt - Matched Data: /.git/ found within REQUEST_FILENAME: /.git/config"
Web App Attack
🇩🇪
mxbl
2026-05-18 16:35:11
(2 weeks ago)
Scanning for CMS vulnerabilities on a non-CMS system: /.git/config
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 16:34:36
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 12:34:31.093086 2026] [security2:error] [pid 7115:tid 7115] [client 35.253.183.225:33326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mkkfactory.com.easternimport.com"] [uri "/.git/config"] [unique_id "ags_l9Z_g57w3ZQHCSjuDwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 16:12:39
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 12:12:35.650507 2026] [security2:error] [pid 7443:tid 7443] [client 35.253.183.225:37418] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mixmediallc.com"] [uri "/.git/config"] [unique_id "ags6c9JZU3sazvst_IJrnwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2026-05-18 16:03:22
(2 weeks ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.253.183.225 (US/United States/22 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 35.253.183.225 (US/United States/225.183.253.35.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-18 15:38:45
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 11:38:40.000700 2026] [security2:error] [pid 7345:tid 7345] [client 35.253.183.225:44444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.misscrankypants.com"] [uri "/.git/config"] [unique_id "agsygE41zLtTGE-wMZDCXwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-18 15:19:52
(2 weeks ago)
PAD: Bad_Web_Bot_D detected
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-18 15:12:49
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 11:12:40.727492 2026] [security2:error] [pid 23865:tid 23865] [client 35.253.183.225:37010] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.miraclepunchy.com"] [uri "/.git/config"] [unique_id "agssaAlUks-TTz6tLgEwtQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-05-18 15:05:31
(2 weeks ago)
Too many Status 40X (11)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇳🇱
wlt-blocker
2026-05-18 15:04:50
(2 weeks ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
big-cloud.nl
2026-05-18 14:50:49
(2 weeks ago)
Try to access /.git/config
Web App Attack
🇦🇺
2000cn.com.au
2026-05-18 14:30:34
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-18 14:15:35
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.183.225 (225.183.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon May 18 10:15:29.893950 2026] [security2:error] [pid 31418:tid 31418] [client 35.253.183.225:44360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.mindchill.net"] [uri "/.git/config"] [unique_id "agsfARsBsgMjfEoeMUrKRgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack