|
🇩🇪
Holger
|
|
Bruteforce WebAttack
|
Brute-Force
Web App Attack
|
|
🇨🇦
polycoda
|
|
📡 Port scan
|
Hacking
Web App Attack
|
|
🇮🇳
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
🇫🇷
Baking333
|
|
[redacted] 34.52.221.29 - - [07/Sep/2026:02:49:56 +0100] "GET /.git-credentials HTTP/1.1" 302 1559 0/95555 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://[redacted]/crawler)" [redacted] 34.52.221.29 - - [07/Sep/2026:02:49:56 +0100] "GET /.git/conf ...
show more
[redacted] 34.52.221.29 - - [07/Sep/2026:02:49:56 +0100] "GET /.git-credentials HTTP/1.1" 302 1559 0/95555 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://[redacted]/crawler)" [redacted] 34.52.221.29 - - [07/Sep/2026:02:49:56 +0100] "GET /.git/config HTTP/1.1" 302 6778 0/65178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on ethyl
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on choy
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
abuse-detection
|
|
Web security detection (http-sensitive-probe); path=/.ssh/id_dsa; status=404
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.52.221.29 (29.221.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 19:53:16.744146 2026] [security2:error] [pid 30883:tid 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.52.221.29 (29.221.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 19:53:16.744146 2026] [security2:error] [pid 30883:tid 30883] [client 34.52.221.29:47266] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||okwellbeing.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "okwellbeing.com"] [uri "/z9x8c7v6b5-debug-trigger-okwellbeing.com"] [unique_id "ap387MKFD50a6bfS2nTBXgAAAA4"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
Baking333
|
|
[redacted] 34.52.221.29 - - [06/Sep/2026:23:49:30 +0100] "GET /static//.env HTTP/1.1" 302 1579 0/48128 "-" "DuckAssistBot/1.1 (https://[redacted]/duckassistbot)" [redacted] 34.52.221.29 - - [06/Sep/2026:23:49:30 +0100] "GET /static//home/user/.env HT ...
show more
[redacted] 34.52.221.29 - - [06/Sep/2026:23:49:30 +0100] "GET /static//.env HTTP/1.1" 302 1579 0/48128 "-" "DuckAssistBot/1.1 (https://[redacted]/duckassistbot)" [redacted] 34.52.221.29 - - [06/Sep/2026:23:49:30 +0100] "GET /static//home/user/.env HTTP/1.1" 302 6798 0/49583 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://[redacted]/)"
show less
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
tutaim.com
|
|
⛔ [07/09/26] This IP has been detected performing multiple attacks on websites (363 attempts blocked). Potential malicious activity.
|
Brute-Force
SSH
Web App Attack
FTP Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.52.221.29 (29.221.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 17:10:28.718016 2026] [security2:error] [pid 30224:tid 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.52.221.29 (29.221.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 17:10:28.718016 2026] [security2:error] [pid 30224:tid 30224] [client 34.52.221.29:44052] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.drunkenmonkeystyle.com|F|2"] [data ".drunkenmonkeystyle.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.drunkenmonkeystyle.com"] [uri "/z9x8c7v6b5-debug-trigger-www.drunkenmonkeystyle.com"] [unique_id "ap3WxCAji1EN_aHAyWk25wAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Scan for .env Files at 2026-09-06T20:10:58+00:00
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.52.221.29 (BE/Belgium/29.221.52.34.bc.googleusercontent.com)
|
SQL Injection
|
