🇳🇱
homeshowdomain.nl
2026-09-10 22:00:39
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-09.
Web App Attack
SSH
Hacking
Anonymous
2026-09-10 05:51:59
UTC ·
(2 months ago)
34.19.145.5 - - [10/Sep/2026:13:51:59 +0800] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Bad Web Bot
Web App Attack
🇺🇸
lavnet.net
2026-09-10 03:34:05
UTC ·
(2 months ago)
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] ...
show more
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] "GET /.env HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] "GET /.env.local HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.145.5 - - [10/Sep/2026:03:34:04 +0000] "GET /.env.production HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.145.5 - - [10/Sep/2026:03:34:05 +0000] "GET /.env.staging HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
...
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-09-10 01:06:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 21:06:44.690100 2026] [security2:error] [pid 7997:tid 7997] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 21:06:44.690100 2026] [security2:error] [pid 7997:tid 7997] [client 34.19.145.5:38928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morninginc.com"] [uri "/.git/config"] [unique_id "aqICpEBd8Y7oY9-fIum5hwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 23:30:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 19:30:15.988453 2026] [security2:error] [pid 16434:tid 1644 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 19:30:15.988453 2026] [security2:error] [pid 16434:tid 16444] [client 34.19.145.5:47866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "morganswarsong.com"] [uri "/.git/config"] [unique_id "aqHsB5YPuQ9nRoAEXZ_SjwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-09 21:10:13
UTC ·
(2 months ago)
Web App Attack
🇳🇱
Site.eu
2026-09-09 19:04:14
UTC ·
(2 months ago)
Excessive multi-domain requests
Brute-Force
🇧🇾
lns.bz
2026-09-09 19:00:48
UTC ·
(2 months ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 14:15:43
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 10:15:37.246364 2026] [security2:error] [pid 7573:tid 7573] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 10:15:37.246364 2026] [security2:error] [pid 7573:tid 7573] [client 34.19.145.5:51474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "johnandramonadunn.com"] [uri "/.git/config"] [unique_id "aqFqCUoUd5H973g3571eggAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
aks4226
2026-09-09 13:22:54
UTC ·
(2 months ago)
Attacking common web applications.
Web App Attack
🇮🇹
VHosting
2026-09-09 12:00:05
UTC ·
(2 months ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-09-09 11:57:32
UTC ·
(2 months ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 11:57:26
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 07:57:21.597235 2026] [security2:error] [pid 8065:tid 8065] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 07:57:21.597235 2026] [security2:error] [pid 8065:tid 8065] [client 34.19.145.5:45554] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "john-bell-associates.com"] [uri "/.git/config"] [unique_id "aqFJoVkbzCuL6R23SGGaHAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 10:59:07
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:59:00.676624 2026] [security2:error] [pid 7927:tid 7927] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.145.5 (5.145.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:59:00.676624 2026] [security2:error] [pid 7927:tid 7927] [client 34.19.145.5:51446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "joharchi.com"] [uri "/.git/config"] [unique_id "aqE79DbuHU9WBgSP1KPFqAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-09 10:35:01
UTC ·
(2 months ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack