🇳🇱
homeshowdomain.nl
2026-11-10 23:00:26
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-09.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-10 13:36:47
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.126.175 (175.126.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:36:41.360018 2026] [security2:error] [pid 21383:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.126.175 (175.126.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 08:36:41.360018 2026] [security2:error] [pid 21383:tid 21383] [client 34.142.126.175:29862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "venture2-22.org"] [uri "/.git/HEAD"] [unique_id "avMd6Qy895Ml1PrQnsvzogAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
caphector.com
2026-11-10 12:51:41
UTC ·
(3 days ago)
[Tue Nov 10 04:51:32.875933 2026] [ssl:error] [pid 1310131:tid 1310131] [client 34.142.126.175:41924] AH02032: Hostname isdemocracydownforeveryoneorjustme.com provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compati ...
show more
[Tue Nov 10 04:51:32.875933 2026] [ssl:error] [pid 1310131:tid 1310131] [client 34.142.126.175:41924] AH02032: Hostname isdemocracydownforeveryoneorjustme.com provided via SNI and hostname no-such-host-8f3a1b.invalid provided via HTTP have no compatible SSL setup for policy 'secure'
[Tue Nov 10 04:51:35.854774 2026] [ssl:error] [pid 1300003:tid 1300003] [client 34.142.126.175:41930] AH02032: Hostname isdemocracydownforeveryoneorjustme.com provided via SNI and hostname staging.isdemocracydownforeveryoneorjustme.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Tue Nov 10 04:51:36.301926 2026] [ssl:error] [pid 1313605:tid 1313605] [client 34.142.126.175:41960] AH02032: Hostname isdemocracydownforeveryoneorjustme.com provided via SNI and hostname dev.isdemocracydownforeveryoneorjustme.com provided via HTTP have no compatible SSL setup for policy 'secure'
[Tue Nov 10 04:51:36.304329 2026] [ssl:error] [pid 1300152:tid 1300152] [client 34.142.126.175:41950] AH02032: Hos
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-10 12:08:52
UTC ·
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 34.142.126.175 (GB/United Kingdom/175.126.142.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇺🇸
mnsf
2026-11-10 11:05:17
UTC ·
(3 days ago)
Scanning/Probing (11)
Brute-Force
Web App Attack
🇯🇵
Valhalla
2026-11-10 10:54:25
UTC ·
(3 days ago)
*.js+.map, trying to unminify my unminified javascript, ><
Bad Web Bot
Hacking
Web App Attack
🇩🇪
satelliteproxy
2026-11-10 03:19:04
UTC ·
(3 days ago)
DPI (Deep Packet Inspection) identified this source as an abusive automated web bot.
Bad Web Bot
🇺🇸
netlinkpro
2026-11-10 02:38:00
UTC ·
(3 days ago)
Web scanning: probed for /.env, /api/.env, /wp-config.php, /.git/HEAD and 4 more. 66 requests, all refused (HTTP 4xx), 2026-11-10 02:38–02:38 UTC.
Web App Attack
🇩🇪
tuxy
2026-11-10 02:36:11
UTC ·
(3 days ago)
[10/Nov/2026:02:36:04 +0000] - 404 404 - GET https tuxy.dev "/.git/HEAD" [Client 34.142.126.175] [Length 2641] [Gzip 2.73] [Sent-to 100.67.20.2] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari ...
show more
[10/Nov/2026:02:36:04 +0000] - 404 404 - GET https tuxy.dev "/.git/HEAD" [Client 34.142.126.175] [Length 2641] [Gzip 2.73] [Sent-to 100.67.20.2] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[10/Nov/2026:02:36:10 +0000] - 404 404 - GET https tuxy.dev "/.git/HEAD" [Client 34.142.126.175] [Length 2641] [Gzip 2.73] [Sent-to 100.67.20.2] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Web App Attack
🇭🇺
bcsaba
2026-11-10 02:25:10
UTC ·
(3 days ago)
Probing for .env file:
34.142.126.175 - - [10/Nov/2026:03:25:07 +0100] "GET /.env HTTP/1.1" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 01:58:06
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.126.175 (175.126.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:58:01.936561 2026] [security2:error] [pid 1879:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.126.175 (175.126.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 09 20:58:01.936561 2026] [security2:error] [pid 1879:tid 1879] [client 34.142.126.175:7740] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "roselockecasting.com"] [uri "/.env"] [unique_id "avJ6KQNQza1fzSFo4Je0cwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-09 22:56:53
UTC ·
(3 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
2026-11-09 22:39:39
UTC ·
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇵🇱
MatStef132
2026-11-09 21:48:16
UTC ·
(4 days ago)
MatShield L7: blocked on a protected site (secret-path-probe)
DDoS Attack
🇧🇪
cmbplf
2026-11-09 21:27:04
UTC ·
(4 days ago)
132 requests with url.path *.svn/*
124 requests with url.path *.hg/*
Brute-Force
Bad Web Bot
