🇳🇱
homeshowdomain.nl
2026-11-07 22:59:20
UTC ·
(18 hours ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
Anonymous
2026-11-07 03:26:57
UTC ·
(1 day ago)
http scanning for .env files
...
Hacking
Web App Attack
🇺🇸
kosada.com
2026-11-07 03:15:09
UTC ·
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /.env.staging (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
Web App Attack
🇳🇱
Alt255
2026-11-07 03:06:09
UTC ·
(1 day ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.100.161.143 - - [07/Nov/2026:04:05:57 +0100] "GET /.git/config HTTP/1.1" 200 1571 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHT ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.100.161.143 - - [07/Nov/2026:04:05:57 +0100] "GET /.git/config HTTP/1.1" 200 1571 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 23:12:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:12:38.548283 2026] [security2:error] [pid 17143:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 18:12:38.548283 2026] [security2:error] [pid 17143:tid 17223] [client 34.100.161.143:59186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "360degreevalue.com"] [uri "/.git/config"] [unique_id "au5e5m_0cb-j9_rFsa9n0QAAAYw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 22:28:25
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:28:21.013741 2026] [security2:error] [pid 32392:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 17:28:21.013741 2026] [security2:error] [pid 32392:tid 32392] [client 34.100.161.143:52390] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "360.visitbyblos.com"] [uri "/.git/config"] [unique_id "au5UhceETflmaFIMS6nLPQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 14:57:30
UTC ·
(2 days ago)
34.100.161.143 - - [06/Nov/2026:16:57:25 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.100.161.143 - - [06/Nov/2026:16:57:25 +0200] "POS ...
show more
34.100.161.143 - - [06/Nov/2026:16:57:25 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.100.161.143 - - [06/Nov/2026:16:57:25 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.100.161.143 - - [06/Nov/2026:16:57:26 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.100.161.143 - - [06/Nov/2026:16:57:26 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.100.161.143 - - [06/Nov/2026:16:57:26 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
...
show less
Bad Web Bot
Web App Attack
🇩🇪
lofi_twenty2
2026-11-06 13:48:06
UTC ·
(2 days ago)
Auto-banned by Fail2ban (wp-joomla-probes) on VPS honeypot/trap
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-06 12:44:29
UTC ·
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 11:49:23
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:49:17.582574 2026] [security2:error] [pid 24605:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 06:49:17.582574 2026] [security2:error] [pid 24605:tid 24605] [client 34.100.161.143:45530] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "34.gisur.com"] [uri "/.git/config"] [unique_id "au2-vRWVTCNrcHY_a5qM8QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 20:51:06
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:51:02.917487 2026] [security2:error] [pid 16947:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 15:51:02.917487 2026] [security2:error] [pid 16947:tid 16947] [client 34.100.161.143:36430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "804web.net"] [uri "/.git/config"] [unique_id "auuatj8NJLJlUJ6RLHmA8QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
Saec
2026-11-04 18:53:06
UTC ·
(3 days ago)
Jarvis auto-ban: Honeypot /administrator/.env via 8.saec.me [IN] ASN:Google LLC
Port Scan
Web App Attack
🇫🇷
dynamix
2026-11-04 13:02:17
UTC ·
(4 days ago)
Multiple WAF Violations
Web App Attack
🇧🇷
Halux
2026-11-04 13:00:17
UTC ·
(4 days ago)
34.100.161.143 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 12:40:15
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:40:12.227715 2026] [security2:error] [pid 28620:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.161.143 (143.161.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:40:12.227715 2026] [security2:error] [pid 28620:tid 28752] [client 34.100.161.143:57006] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "7sons.net"] [uri "/.git/config"] [unique_id "ausnrIY_8sbhB_sEGv9I9AAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack