🇳🇱
homeshowdomain.nl
2026-05-02 22:08:15
UTC ·
(6 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-05-01.
Web App Attack
SSH
Hacking
🇮🇳
evicky2002
2026-05-02 06:00:00
UTC ·
(6 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
2026-05-01 16:31:46
UTC ·
(6 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-05-01 06:55:05
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:54:57.324322 2026] [security2:error] [pid 8046:tid 804 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:54:57.324322 2026] [security2:error] [pid 8046:tid 8046] [client 34.32.29.233:50708] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "niseigroup.com"] [uri "/.git/config"] [unique_id "afROQQvV65aDTMClW21D_QAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Tokolosh Hunters
2026-05-01 06:47:05
UTC ·
(6 months ago)
AutoBlockWindow-Known bad useragent query-2026-05-01 06:47:04
Bad Web Bot
🇺🇸
TPI-Abuse
2026-05-01 06:20:30
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:20:25.124753 2026] [security2:error] [pid 6837:tid 683 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 02:20:25.124753 2026] [security2:error] [pid 6837:tid 6837] [client 34.32.29.233:40044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.bestfriendz.us"] [uri "/.git/config"] [unique_id "afRGKZUmOOEreazMbSeLMwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-05-01 06:19:51
UTC ·
(6 months ago)
IP banned by Fail2Ban in jail suss access.log ah-app-1
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 05:26:33
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 01:26:28.678715 2026] [security2:error] [pid 18082:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 01 01:26:28.678715 2026] [security2:error] [pid 18082:tid 18082] [client 34.32.29.233:39874] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fattoria-rendena.it"] [uri "/.git/config"] [unique_id "afQ5hOgeOiOd9U7eVgfDPwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-05-01 04:38:00
UTC ·
(6 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.32.29.233 (DE/Germany/233.29.32.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-197)
Hacking
🇳🇿
Antinson
2026-05-01 04:33:51
UTC ·
(6 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
octageeks.com
2026-05-01 04:08:59
UTC ·
(6 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
jjnxpct
2026-05-01 03:51:39
UTC ·
(6 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /.git/config (Rule ID: 930130) - Restricted File Access Attempt [Suspicious: .git/ found within REQUEST_FILENAME: /.git/config]
Web App Attack
Hacking
🇨🇭
4server
2026-05-01 03:05:26
UTC ·
(6 months ago)
[FriMay0105:05:20.3739772026][security2:error][pid1496769:tid1497307][client34.32.29.233:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720 ...
show more
[FriMay0105:05:20.3739772026][security2:error][pid1496769:tid1497307][client34.32.29.233:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"privilege-service.ch.81-17-25-250.cpanel.site\"][uri\"/.git/config\"][unique_id\"afQYcCnp1J-L3QfqqB0AYwAAANg\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-05-01 00:18:17
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 20:18:11.239381 2026] [security2:error] [pid 5109:tid 510 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 20:18:11.239381 2026] [security2:error] [pid 5109:tid 5109] [client 34.32.29.233:56568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crazypencil.com"] [uri "/.git/config"] [unique_id "afPxQ6FhJf3EiShCxNTXfwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-04-30 23:59:33
UTC ·
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:59:27.348966 2026] [security2:error] [pid 10278:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.29.233 (233.29.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Apr 30 19:59:27.348966 2026] [security2:error] [pid 10278:tid 10278] [client 34.32.29.233:40462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "36hoursonly.com"] [uri "/.git/config"] [unique_id "afPs35lCn1mNNbnmKKZjwQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack