🇳🇱
homeshowdomain.nl
2026-11-05 22:59:35
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-11-04 00:59:06
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:59:00.693040 2026] [security2:error] [pid 31973:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 19:59:00.693040 2026] [security2:error] [pid 31973:tid 31973] [client 34.143.199.152:46752] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingmountainsbrewing.com"] [uri "/.git/config"] [unique_id "auqDVB6llx276giyRqzlQgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 23:29:58
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:29:52.015357 2026] [security2:error] [pid 23498:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 18:29:52.015357 2026] [security2:error] [pid 23498:tid 23498] [client 34.143.199.152:55488] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dancingbearprinting.com"] [uri "/.git/config"] [unique_id "aupucPnr7gpfcUb1jkwk0wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 22:48:44
UTC ·
(4 days ago)
(mod_security) mod_security (id:949110) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:48:38.858338 2026] [security2:error] [pid 27637:ti ...
show more
(mod_security) mod_security (id:949110) triggered by 34.143.199.152 (152.199.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 17:48:38.858338 2026] [security2:error] [pid 27637:tid 27637] [client 34.143.199.152:34094] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "danchujkoassoc.com"] [uri "/.git/config"] [unique_id "aupkxpRSMmAX5UAu310iIgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-03 22:40:28
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
2026-11-03 03:20:28
UTC ·
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-03 02:08:01
UTC ·
(5 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇳🇿
Tripwire
2026-11-03 01:33:33
UTC ·
(5 days ago)
Scanning for exploits - /.env
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-02 14:16:13
UTC ·
(5 days ago)
[Tue Nov 03 01:16:12.486740 2026] [security2:error] [pid 120721] [client 34.143.199.152:56710] [client 34.143.199.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/RE ...
show more
[Tue Nov 03 01:16:12.486740 2026] [security2:error] [pid 120721] [client 34.143.199.152:56710] [client 34.143.199.152] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dlcarterauthor.com"] [uri "/"] [unique_id "auibLAbr4J32OuZqRCEIHQAAABA"]
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-02 07:10:05
UTC ·
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
