|
🇳🇱
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-03.
|
Web App Attack
SSH
Hacking
|
|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
|
Exploited Host
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:06:38.289824 2026] [security2:error] [pid 3319:tid 3 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 12:06:38.289824 2026] [security2:error] [pid 3319:tid 3319] [client 34.93.170.123:50420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jolankagroup.com"] [uri "/.git/config"] [unique_id "auoUnmqi0BuEcelzWAh-QgAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
Aufpasser_1973
|
|
Fail2Ban Caddy: Web App Attack, /.git/config
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 50 and more bad rqs apache.
|
Hacking
Bad Web Bot
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:01:26.542350 2026] [security2:error] [pid 8785:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:01:26.542350 2026] [security2:error] [pid 8785:tid 8785] [client 34.93.170.123:42598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathynash.com"] [uri "/.git/config"] [unique_id "aujsFnENTAx9cz8eZweJ1gAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:26:47.789365 2026] [security2:error] [pid 18582:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 12:26:47.789365 2026] [security2:error] [pid 18582:tid 18582] [client 34.93.170.123:49788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathydumesnilart.com"] [uri "/.git/config"] [unique_id "aujH1_bheV-u0i-AEbziCQAAAAo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on redirect
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
IndigoRidge
|
|
[02/Nov/2026:10:43:41.989984 --0500] auivreeJ5K2UG34EQNuykwAAARg 34.93.170.123 52922 205.233.18.17 7081
[02/Nov/2026:10:43:42.631802 --0500] auivrmL5hL7tNEdOqO4ClwAAAFI 34.93.170.123 52960 205.233.18.17 7081
[02/Nov/2026:10:43:42.890312 --0500] auivr ...
show more
[02/Nov/2026:10:43:41.989984 --0500] auivreeJ5K2UG34EQNuykwAAARg 34.93.170.123 52922 205.233.18.17 7081
[02/Nov/2026:10:43:42.631802 --0500] auivrmL5hL7tNEdOqO4ClwAAAFI 34.93.170.123 52960 205.233.18.17 7081
[02/Nov/2026:10:43:42.890312 --0500] auivroSopEbxiC3QlSutXQAAAIo 34.93.170.123 52986 205.233.18.17 7081
[02/Nov/2026:10:43:43.149744 --0500] auivr4SopEbxiC3QlSutXwAAAIw 34.93.170.123 52996 205.233.18.17 7081
[02/Nov/2026:10:43:43.162696 --0500] auivr4SopEbxiC3QlSutYAAAAJE 34.93.170.123 53004 205.233.18.17 7081
...
show less
|
Hacking
|
|
Anonymous
|
|
Web application attack: http sensitive files; Probing for exposed secret / credential files
|
Hacking
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:32:52.705492 2026] [security2:error] [pid 9465:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.170.123 (123.170.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 09:32:52.705492 2026] [security2:error] [pid 9465:tid 9465] [client 34.93.170.123:51346] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kathrynsaunders.com"] [uri "/.git/config"] [unique_id "auifFASyprapJUqm-HOYsQAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
