🇳🇱
homeshowdomain.nl
2026-09-06 22:01:24
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-05.
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-09-06 06:02:40
UTC ·
(2 months ago)
19 attempts against mh-modsecurity-ban on neon
Brute-Force
Web App Attack
Anonymous
2026-09-06 02:50:23
UTC ·
(2 months ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇳🇱
WeCloudit-Anti-Abuse
2026-09-05 23:00:18
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-05 22:55:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:55:50.557017 2026] [security2:error] [pid 17084:tid 1708 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:55:50.557017 2026] [security2:error] [pid 17084:tid 17084] [client 34.30.66.43:60280] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.kelting.net"] [uri "/.env.bak"] [unique_id "apyd9j2AqzGMQu6-Ec1DLAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-05 22:40:34
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 22:37:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:37:46.634667 2026] [security2:error] [pid 10064:tid 1006 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 18:37:46.634667 2026] [security2:error] [pid 10064:tid 10064] [client 34.30.66.43:41392] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.yevid.com"] [uri "/.env.example"] [unique_id "apyZuuwNjoBk7RdDNlfx_QAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-05 22:24:43
UTC ·
(2 months ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-05 22:19:39
UTC ·
(2 months ago)
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-05 22:06:01
UTC ·
(2 months ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-05 20:40:03
UTC ·
(2 months ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-05 20:38:14
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 16:38:10.434940 2026] [security2:error] [pid 4562:tid 4562] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 16:38:10.434940 2026] [security2:error] [pid 4562:tid 4562] [client 34.30.66.43:38152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.enlightened-workplace.com"] [uri "/wp-config.php.bak"] [unique_id "apx9soDPvxhpWbyJGgQQbQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 12:40:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:40:19.017948 2026] [security2:error] [pid 31692:tid 3169 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.30.66.43 (43.66.30.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:40:19.017948 2026] [security2:error] [pid 31692:tid 31692] [client 34.30.66.43:38254] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||franzcorpinc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "franzcorpinc.com"] [uri "/backup.sql"] [unique_id "apq8M2PSSek0M3bbwYW8JwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack