🇳🇱
homeshowdomain.nl
2026-09-02 22:00:25
(12 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-02 13:13:18
(21 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.100.218.89 (89.218.100.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.100.218.89 (89.218.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 09:13:12.071428 2026] [security2:error] [pid 4821:tid 4821] [client 34.100.218.89:42724] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "leseberg.com"] [uri "/site/.git/config"] [unique_id "apgg6Gz3vv6GYkSORHwkRQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-02 13:08:22
(21 hours ago)
[WedSep0215:08:16.1756612026][security2:error][pid3874508:tid3874738][client34.100.218.89:0]ModSecur ...
show more
[WedSep0215:08:16.1756612026][security2:error][pid3874508:tid3874738][client34.100.218.89:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"larademarco.ch.81-17-25-250.cpanel.site\"][uri\"/var/www/.git/config\"][unique_id\"apgfwDU7V-4FbuZEr7uoGAAAAVA\"]
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-02 05:58:09
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:17:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:17:04.006560 2026] [security2:error] [pid 6472:tid 6472] [client 34.100.218.89:38206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.micadensoftware.com"] [uri "/www/.git/config"] [unique_id "apexUEpcXzlpN9J0cm_7xgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 05:01:52
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 01:01:46.794117 2026] [security2:error] [pid 18301:tid 18301] [client 34.100.218.89:45978] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.patrickodougherty.com"] [uri "/var/www/.git/config"] [unique_id "apetuvHJmGV_1F271Wfx-gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 04:39:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 00:39:52.536284 2026] [security2:error] [pid 10933:tid 10933] [client 34.100.218.89:35016] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.knorg.com"] [uri "/html/.git/config"] [unique_id "apeomGbVmMg_wqIh2Ob2BgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-02 02:33:35
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇫🇷
YF
2026-09-02 02:31:06
(1 day ago)
Git config exposure probe
Web App Attack
🇺🇸
TPI-Abuse
2026-09-02 02:30:10
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.100.218.89 (89.218.100.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:29:58.443239 2026] [security2:error] [pid 26052:tid 26052] [client 34.100.218.89:49542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "verdeprofundo.net"] [uri "/app/.git/config"] [unique_id "apeKJjRR8ap7Nl6G5uaplQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-02 02:07:53
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
🇮🇹
CoreTech srl
2026-09-02 00:53:56
(1 day ago)
cloudlinux2 fail2ban: 2026-09-02 02:49:53,201 fail2ban.filter [1605]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-02 02:49:53,201 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02:49:53cloudlinux2 fail2ban: 2026-09-02 02:49:53,268 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02:49:53cloudlinux2 fail2ban: 2026-09-02 02:49:53,285 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02:49:53cloudlinux2 fail2ban: 2026-09-02 02:49:53,276 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02:49:53cloudlinux2 fail2ban: 2026-09-02 02:49:49,818 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 129.222.187.55 - 2026-09-02 02:49:49cloudlinux2 fail2ban: 2026-09-02 02:49:53,336 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02:49:53cloudlinux2 fail2ban: 2026-09-02 02:49:53,293 fail2ban.filter [1605]: INFO [plesk-modsecurity] Found 34.100.218.89 - 2026-09-02 02
show less
Brute-Force
🇺🇸
nyt
2026-09-02 00:41:24
(1 day ago)
Sensitive File Probe
Web App Attack
🇮🇹
clamehost.it
2026-09-02 00:04:29
(1 day ago)
Automatic report - Brute Force attack using this IP address
Brute-Force
🇩🇪
ddobko
2026-09-01 21:38:30
(1 day ago)
Bad Web Bot
Web App Attack