🇳🇱
homeshowdomain.nl
2026-09-08 22:00:59
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-07.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-07 20:47:32
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:47:24.528154 2026] [security2:error] [pid 6488:tid 655 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:47:24.528154 2026] [security2:error] [pid 6488:tid 6557] [client 34.53.10.191:37258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.esgcommission.org"] [uri "/@fs/.env.development"] [unique_id "ap8i3A_ZzOtHXG9fkG1XIwAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-07 20:39:16
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 20:27:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:27:48.828997 2026] [security2:error] [pid 18786:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 16:27:48.828997 2026] [security2:error] [pid 18786:tid 18786] [client 34.53.10.191:3278] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.octitlerep.com"] [uri "/@fs/../../.env"] [unique_id "ap8eREw-eqpdcCdxvXoqLAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-07 19:56:12
UTC ·
(2 months ago)
Bot / seems abusive / Apache connections: 41
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-09-07 19:48:00
UTC ·
(2 months ago)
block ruleset bad bot: misc bad content F608233CC4C86EE814CE8DDDA9C4A0D3C79882F6
Bad Web Bot
🇧🇪
cmbplf
2026-09-07 19:40:40
UTC ·
(2 months ago)
3.294 requests with url.path */@fs/*
984 requests with url.path *.aws/*
437 requests with url.path *config.json
291 requests with url.path *.config/*
189 requests with url.path *.ssh/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-07 19:21:36
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:21:28.703210 2026] [security2:error] [pid 575:tid 575] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:21:28.703210 2026] [security2:error] [pid 575:tid 575] [client 34.53.10.191:53132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bassboatmagazine.com"] [uri "/@fs/../../.env"] [unique_id "ap8OuBEhNO0A3XQkz8usWQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 19:04:28
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:04:23.985568 2026] [security2:error] [pid 24332:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 15:04:23.985568 2026] [security2:error] [pid 24332:tid 24332] [client 34.53.10.191:6364] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.randyscbcenter.com"] [uri "/@fs/.env"] [unique_id "ap8Kt47DBJL-1zNJmXx9rAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
Countryman
2026-09-07 18:18:17
UTC ·
(2 months ago)
IPS detection: Vite.server.fs.deny.raw.Arbitrary.File.Read
Hacking
🇨🇿
Countryman
2026-09-07 18:18:17
UTC ·
(2 months ago)
IPS detection: Vite.server.fs.deny.raw.Arbitrary.File.Read
Hacking
🇸🇪
vaia.cloud
2026-09-07 18:10:01
UTC ·
(2 months ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-07 17:55:58
UTC ·
(2 months ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Savvii
2026-09-07 17:27:40
UTC ·
(2 months ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 17:18:01
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:17:54.324045 2026] [security2:error] [pid 15550:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.10.191 (191.10.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 13:17:54.324045 2026] [security2:error] [pid 15550:tid 15550] [client 34.53.10.191:57414] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.central-wi-coal-sales.com"] [uri "/@fs/.env"] [unique_id "ap7xwqytCwRipmcxBQMIigAAAHA"]
show less
Brute-Force
Bad Web Bot
Web App Attack