|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-17.
|
Web App Attack
SSH
Hacking
|
|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
|
Brute-Force
|
|
🇧🇪
cmbplf
|
|
306 requests with url.path *phpinfo.php
|
Brute-Force
Bad Web Bot
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:15:13.356343 2026] [security2:error] [pid 17761:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 23:15:13.356343 2026] [security2:error] [pid 17761:tid 17761] [client 34.186.52.136:58268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kdgsf.xyz"] [uri "/.git/config"] [unique_id "atQ5wfHPt-jH6tQOUrwLAQAAAAU"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
xlusions
|
|
Automated vulnerability scan detected (e.g. /.git/config).
|
Web App Attack
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:14:16.235646 2026] [security2:error] [pid 20163:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 22:14:16.235646 2026] [security2:error] [pid 20163:tid 20238] [client 34.186.52.136:36828] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kd9uri.com"] [uri "/.git/config"] [unique_id "atQreFitK1LVnn7K56D4HgAAAQE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇺🇦
URAN Publishing Service
|
|
[18/Oct/2026:04:50:34 +0300] -- 34.186.52.136 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
hidemail.app
|
|
Automated scan for exposed config/secret files and known web exploits (e.g. /.env, RCE probes); auto-banned by fail2ban.
|
Web App Attack
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:56:20.636379 2026] [security2:error] [pid 23630:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:56:20.636379 2026] [security2:error] [pid 23630:tid 23633] [client 34.186.52.136:38700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcscomputer.com"] [uri "/.git/config"] [unique_id "atQZNBZTfTsG5ruhLTn9ugAAAIA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:31:34.971653 2026] [security2:error] [pid 21281:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 20:31:34.971653 2026] [security2:error] [pid 21281:tid 21281] [client 34.186.52.136:49842] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kcpeople.loudenlow.com"] [uri "/.git/config"] [unique_id "atQTZpiXJkdUO9HzB1r6PQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:49:19.936066 2026] [security2:error] [pid 13078:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.52.136 (136.52.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 19:49:19.936066 2026] [security2:error] [pid 13078:tid 13078] [client 34.186.52.136:54212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kclawoffice.com"] [uri "/.git/config"] [unique_id "atQJf7u7wz5PWSgPEp76BQAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
