🇳🇱
homeshowdomain.nl
2026-06-09 21:59:52
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-08.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-09 16:28:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 12:28:49.991520 2026] [security2:error] [pid 1157:tid 1157] [client 34.138.73.53:37430] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tecnoconce.cl"] [uri "/.git/config"] [unique_id "aig_QZ1AAaKXXFLqSR8jZAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
INTEQ
2026-06-09 15:40:34
(3 days ago)
Web attack from 34.138.73.53
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 15:16:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 11:16:38.295129 2026] [security2:error] [pid 31194:tid 31194] [client 34.138.73.53:56646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.creativeawardsaz.com"] [uri "/.git/config"] [unique_id "aiguVijhTW0lxg0eagatcQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 14:34:45
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 10:34:40.204565 2026] [security2:error] [pid 16768:tid 16768] [client 34.138.73.53:59272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ohanameetup.party"] [uri "/.git/config"] [unique_id "aigkgBs15rhj1E44qdnCCAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 12:33:00
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 08:32:55.315349 2026] [security2:error] [pid 15135:tid 15135] [client 34.138.73.53:40646] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hayresearch.am"] [uri "/.git/config"] [unique_id "aigH92-e4wWoISkqkdHpowAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Axel
2026-06-09 12:03:02
(4 days ago)
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config ...
show more
Blocked by ModSecurity. Rule ID: 210492 Message: None Phase: 1 Severity: CRITICAL URI: /.git/config Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇦🇺
paulshipley.com.au
2026-06-09 10:35:00
(4 days ago)
[Tue Jun 09 20:34:59.981606 2026] [security2:error] [pid 238724] [client 34.138.73.53:43250] [client ...
show more
[Tue Jun 09 20:34:59.981606 2026] [security2:error] [pid 238724] [client 34.138.73.53:43250] [client 34.138.73.53] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.co.nz"] [uri "/.git/config"] [unique_id "aifsU_yYyGJax-b-46DZ_QAAACY"]
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 09:28:41
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 05:28:37.121821 2026] [security2:error] [pid 26394:tid 26394] [client 34.138.73.53:56122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "conversationtalentnetwork.com"] [uri "/.git/config"] [unique_id "aifcxQlF1cawKF_VJ2e3OgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-06-09 07:25:02
(4 days ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints ( ...
show more
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 06:51:46
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 02:51:43.214470 2026] [security2:error] [pid 14224:tid 14224] [client 34.138.73.53:57170] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.oxysulfur.com.mroxygen.org"] [uri "/.git/config"] [unique_id "aie3_6DGe3Vd0JuiAoKZbAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-06-09 04:31:23
(4 days ago)
[TueJun0906:31:20.1732482026][security2:error][pid2328467:tid2328586][client34.138.73.53:0]ModSecuri ...
show more
[TueJun0906:31:20.1732482026][security2:error][pid2328467:tid2328586][client34.138.73.53:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.giuseppeasaro.com.136-243-54-122.cpanel.site\"][uri\"/.git/config\"][unique_id\"aieXGHQxMJgjpplA9xVLIQAAAIk\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 04:02:08
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 00:02:03.191955 2026] [security2:error] [pid 12192:tid 12283] [client 34.138.73.53:46214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emjayentertainmentdj.com"] [uri "/.git/config"] [unique_id "aieQO5HxBMnuiXLcvIGjoQAAAhI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:35:50
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:35:47.384269 2026] [security2:error] [pid 25944:tid 25946] [client 34.138.73.53:33702] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kandooo.com"] [uri "/.git/config"] [unique_id "aieKEwWPhOHib9IsfKtnvgAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 03:20:16
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.73.53 (53.73.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 23:20:10.890437 2026] [security2:error] [pid 2386:tid 2386] [client 34.138.73.53:49770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "happyjackmc.com"] [uri "/.git/config"] [unique_id "aieGav4tS4BHatfbaGzUWwAAAFo"]
show less
Brute-Force
Bad Web Bot
Web App Attack