🇳🇱
Site.eu
2026-09-01 22:38:16
(4 minutes ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
FD-IX
2026-09-01 11:12:29
(11 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:32:57
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:32:51.360547 2026] [security2:error] [pid 30773:tid 30773] [client 34.88.108.31:33760] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toppress.ca"] [uri "/.git/config"] [unique_id "apaNs1Oq5EMJ1jlazVhQRgAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 08:12:15
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-01 07:21:47
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:21:39.896105 2026] [security2:error] [pid 22312:tid 22312] [client 34.88.108.31:42038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "topnotchupholstery.com"] [uri "/.git/config"] [unique_id "apZ9A0NF3A90HNBF0alMGQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-01 04:34:09
(18 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
ecode hosting
2026-09-01 02:31:04
(20 hours ago)
Domain : topconmk.com
Rule : env
2026-09-01 02:29:57 10.100.1.20 GET /server-info.php - 443 - 34.88. ...
show more
Domain : topconmk.com
Rule : env
2026-09-01 02:29:57 10.100.1.20 GET /server-info.php - 443 - 34.88.108.31 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - topconmk.com 404 0 2 1515 294 135 - -
show less
Hacking
SQL Injection
🇳🇱
Mangelot Hosting
2026-08-31 23:59:07
(22 hours ago)
(modsecurity) srv201 ModSecurity 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 30 in the las ...
show more
(modsecurity) srv201 ModSecurity 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Savvii
2026-08-31 18:37:48
(1 day ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-31 18:36:03
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-08-31 18:30:06
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, GET /.env.production HTTP/1.1, GE ...
show more
Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.bak HTTP/1.1, POST / HTTP/1.1
show less
Hacking
Web App Attack
🇧🇷
Halux
2026-08-31 18:20:59
(1 day ago)
34.88.108.31 Probing protected path or service
Web App Attack
🇵🇱
Budyn
2026-08-31 17:55:38
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: tug.budyn.wtf | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 17:07:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 13:07:11.985274 2026] [security2:error] [pid 17992:tid 17992] [client 34.88.108.31:55376] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tudor-harris.com"] [uri "/.git/config"] [unique_id "apW0v1JP2hcMYKalgp1jqwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 16:15:40
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.108.31 (31.108.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 12:15:35.258177 2026] [security2:error] [pid 6208:tid 6208] [client 34.88.108.31:44784] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tucek.org"] [uri "/.git/config"] [unique_id "apWop5eFIPJIjSv72xG1sgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack