🇩🇪
klaus_ph
2026-09-23 14:42:11
(32 minutes ago)
2026-09-23 01:19:20,103 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.166.175.160
. ...
show more
2026-09-23 01:19:20,103 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.166.175.160
...
show less
Bad Web Bot
🇳🇱
homeshowdomain.nl
2026-09-21 21:59:56
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-20.
show less
Web App Attack
SSH
Hacking
🇮🇳
evicky2002
2026-09-21 00:02:56
(2 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇷🇺
DZBOT
2026-09-20 23:09:17
(2 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇬🇧
Apache
2026-09-20 22:35:25
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.166.175.160 (SA/Saudi Arabia/160.175.166.34. ...
show more
(mod_security) mod_security (id:210730) triggered by 34.166.175.160 (SA/Saudi Arabia/160.175.166.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 22:18:51
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 18:18:48.028893 2026] [security2:error] [pid 7108:tid 7108] [client 34.166.175.160:46144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dandemonium.net"] [uri "/.git/config"] [unique_id "arBbyBHuPAlayED9SIHw2wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 21:19:42
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:19:37.981246 2026] [security2:error] [pid 3619:tid 3619] [client 34.166.175.160:39848] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "danchujkoassoc.com"] [uri "/.git/config"] [unique_id "arBN6V_6fFUBCvL5_2azagAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-20 21:03:34
(2 days ago)
[21/Sep/2026:00:03:33 +0300] -- 34.166.175.160 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.gi ...
show more
[21/Sep/2026:00:03:33 +0300] -- 34.166.175.160 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-09-20 20:03:48
(2 days ago)
[Mon Sep 21 06:03:47.759024 2026] [security2:error] [pid 20247] [client 34.166.175.160:60174] [clien ...
show more
[Mon Sep 21 06:03:47.759024 2026] [security2:error] [pid 20247] [client 34.166.175.160:60174] [client 34.166.175.160] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "dance4fitness.com.au"] [uri "/"] [unique_id "arA8I8t2pbknUKos4DnnowAAABc"]
...
show less
Web App Attack
2026-09-20 19:00:09
(2 days ago)
| [Dangerous/Saudi Arabia] Aggressive IP 34.166.175.160 (~30 hits). Type: DoS Defender- Web server 4 ...
show more
| [Dangerous/Saudi Arabia] Aggressive IP 34.166.175.160 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-20 18:59:16
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:59:10.555339 2026] [security2:error] [pid 3183:tid 3183] [client 34.166.175.160:41014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danasedge.net"] [uri "/.git/config"] [unique_id "arAs_l1ks8bZbjM7HIMNnQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 18:37:04
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:36:58.483618 2026] [security2:error] [pid 11916:tid 12028] [client 34.166.175.160:46292] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danandlila.com"] [uri "/.git/config"] [unique_id "arAnymJRSZfUJvFtHn0UUAAAANI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-20 18:11:14
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.175.160 (160.175.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 14:11:07.254764 2026] [security2:error] [pid 8528:tid 8528] [client 34.166.175.160:54116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "danafrostick.com"] [uri "/.git/config"] [unique_id "arAhu7t6udiyZ83UWg3ulgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-20 14:50:04
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-20 14:12:25
(3 days ago)
Excessive multi-domain requests
Brute-Force