🇺🇸
infra-monitor
2026-09-01 09:00:05
(4 hours ago)
Automated ban via infra-monitor: suspicious-probe
Port Scan
🇺🇸
TPI-Abuse
2026-09-01 07:45:24
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:45:20.276259 2026] [security2:error] [pid 20714:tid 20714] [client 34.101.124.123:45454] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jerusalem-korczak-home.com"] [uri "/.git/config"] [unique_id "apaCkAGAoOcWpnhCXbworQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-01 06:32:23
(6 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇬🇧
AvonleaConsulting
2026-09-01 04:53:17
(8 hours ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 19:09:32
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 15:09:24.916314 2026] [security2:error] [pid 30494:tid 30494] [client 34.101.124.123:21286] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "forerunnersjazz.org"] [uri "/.git/config"] [unique_id "apXRZCK0sHwb_g2ksLdTPwAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-08-31 19:09:25
(18 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
mnsf
2026-08-31 13:05:05
(1 day ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 12:55:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 08:55:52.510108 2026] [security2:error] [pid 16278:tid 16278] [client 34.101.124.123:31820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "montebiancoltd.com"] [uri "/.git/config"] [unique_id "apV52NC4hcqMnn90BP3v4wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 19:46:24
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 15:46:16.992234 2026] [security2:error] [pid 7674:tid 7674] [client 34.101.124.123:26808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "caribbeantracking.com"] [uri "/.git/config"] [unique_id "apSIiMx562Ph7t0zeP8rJAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-30 17:59:56
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 13:59:52.176238 2026] [security2:error] [pid 19597:tid 19597] [client 34.101.124.123:15144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bkspeck.com"] [uri "/.git/config"] [unique_id "apRvmJGfm-iBAWBrO5l97AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-07-05 01:41:39
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Cloud86 B.V.
2026-07-04 10:26:04
(1 month ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-07-04 10:18:44
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210730) triggered by 34.101.124.123 (123.124.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 04 06:18:40.401698 2026] [security2:error] [pid 31317:tid 31317] [client 34.101.124.123:47034] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scala-global.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scala-global.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "akjeABBSRUe6jf_3E8E1JQAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-05-17 14:09:30
(3 months ago)
20 attempts against mh-misbehave-ban on kiwi
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
Origon
2026-05-17 11:32:38
(3 months ago)
http-sensitive-files - IP: 34.101.124.123 - time="2026-05-17T13:32:38+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.101.124.123 - time="2026-05-17T13:32:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.101.124.123 (ID/396982) : 4h ban on Ip 34.101.124.123" module=db
show less
Web App Attack