🇳🇱
homeshowdomain.nl
2026-05-23 21:59:45
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-22.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-05-22 12:40:49
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 08:40:41.947932 2026] [security2:error] [pid 17164:tid 17164] [client 34.129.43.100:60626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "adamsclothiers.com"] [uri "/.git/config"] [unique_id "ahBOySS9yfpNq_Gstr7sIAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-05-22 12:14:10
(2 weeks ago)
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probi ...
show more
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 10:07:05
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 06:06:58.904896 2026] [security2:error] [pid 10313:tid 10313] [client 34.129.43.100:41150] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.howse.us"] [uri "/.git/config"] [unique_id "ahAqwuuG3dHVVvCITXo9DQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 09:19:07
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 05:19:02.391321 2026] [security2:error] [pid 22647:tid 22647] [client 34.129.43.100:55234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.digifonics.com"] [uri "/.git/config"] [unique_id "ahAfhlMxHDQ2A3gv4z6DLgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 08:48:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 04:48:47.615101 2026] [security2:error] [pid 28347:tid 28347] [client 34.129.43.100:59380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.asaint.net"] [uri "/.git/config"] [unique_id "ahAYby22tknUH0VfX5s29AAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-22 08:21:52
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.129.43.100 (100.43.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 22 04:21:46.935815 2026] [security2:error] [pid 26449:tid 26504] [client 34.129.43.100:42000] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.cityfilms-lb.com"] [uri "/.git/config"] [unique_id "ahASGvmebXXha_qMJ9voZAAAAMw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-22 04:18:48
(2 weeks ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.129.43.100 (AU/Australia/100.43.12 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.129.43.100 (AU/Australia/100.43.129.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
show less
Hacking
🇵🇱
sefinek.net
2026-05-20 00:03:35
(2 weeks ago)
Honeypot hit: Large payload (1507 bytes); 8888 [1] TCP
Reported by: https://github.com/sefinek/T-Pot ...
show more
Honeypot hit: Large payload (1507 bytes); 8888 [1] TCP
Reported by: https://github.com/sefinek/T-Pot-To-AbuseIPDB
show less
Bad Web Bot
🇬🇧
PeravixGroup
2026-05-19 22:52:04
(2 weeks ago)
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: ME ...
show more
Honeypot detection: Elasticsearch unauthorized access / data leak attempt on port 9200. Severity: MEDIUM. Aaran.cloud
show less
Hacking
Exploited Host
🇺🇸
drewf.ink
2026-05-19 22:09:56
(2 weeks ago)
[22:09] Port scanning. Port(s) scanned: TCP/9090
Port Scan