🇳🇱
homeshowdomain.nl
2026-02-01 22:59:39
UTC ·
(9 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-01-31.
Hacking
Web App Attack
SSH
🇺🇸
octageeks.com
2026-02-01 05:06:32
UTC ·
(9 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇦🇺
MAGIC
2026-02-01 00:31:03
UTC ·
(9 months ago)
VM5 Bad user agents ignoring web crawling rules. Draing bandwidth
DDoS Attack
Bad Web Bot
🇳🇿
Antinson
2026-01-31 23:53:10
UTC ·
(9 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇬🇧
Swiptly
2026-01-31 23:27:49
UTC ·
(9 months ago)
Bot scanning for environment files .env .env/\*
...
Web App Attack
2026-01-31 23:06:03
UTC ·
(9 months ago)
Trying to access config files
Web App Attack
2026-01-31 23:00:47
UTC ·
(9 months ago)
Attempted access to sensitive endpoint (/.git/config) detected. Automated scan or unauthorized probing.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-01-31 22:59:13
UTC ·
(9 months ago)
Auto-ban: >3000 req/min op 2026-01-31
Hacking
Web App Attack
SSH
🇩🇪
filstal.org
2026-01-31 22:54:48
UTC ·
(9 months ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇵🇱
IROK
2026-01-31 22:46:24
UTC ·
(9 months ago)
Malware/WebShell Scan blocked by ModSecurity
...
Hacking
🇷🇴
INTEQ
2026-01-31 22:36:07
UTC ·
(9 months ago)
Web attack from 34.90.27.49
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 21:56:50
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 16:56:46.859486 2026] [security2:error] [pid 831:tid 831] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 16:56:46.859486 2026] [security2:error] [pid 831:tid 831] [client 34.90.27.49:39142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.be4ventures.com"] [uri "/.git/config"] [unique_id "aX56nh4x_wIeZPCGnv89fQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 20:52:43
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:52:37.818458 2026] [security2:error] [pid 3691:tid 3691] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:52:37.818458 2026] [security2:error] [pid 3691:tid 3691] [client 34.90.27.49:46526] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.alejandrogorsse.com"] [uri "/.git/config"] [unique_id "aX5rlSkPPW8PpT5CdEeRfAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 20:34:26
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:34:21.309874 2026] [security2:error] [pid 158264:tid 158 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:34:21.309874 2026] [security2:error] [pid 158264:tid 158264] [client 34.90.27.49:44326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.adamscott.us"] [uri "/.git/config"] [unique_id "aX5nTa9MbOzbu4MKfH0plAAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-01-31 20:14:37
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:14:31.838253 2026] [security2:error] [pid 14696:tid 1469 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.90.27.49 (49.27.90.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 31 15:14:31.838253 2026] [security2:error] [pid 14696:tid 14696] [client 34.90.27.49:38272] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.10besthotels.com"] [uri "/.git/config"] [unique_id "aX5ip3a2xc8Q7CTDrtrKAgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack