🇭🇰
i553041
2026-05-28 10:14:14
(1 week ago)
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.local HTTP/1.1" 404 125 "-" "Mozilla/5.0 ...
show more
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.local HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET / HTTP/1.1" 200 396 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.production HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.backup HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.bak HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.old HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusader/1.0)"
34.104.237.236 - - [28/May/2026:18:14:12 +0800] "GET /.env.prod HTTP/1.1" 404 125 "-" "Mozilla/5.0 (compatible; Crusad
...
show less
Brute-Force
SSH
🇫🇷
omartin
2026-05-28 08:54:44
(1 week ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
🇹🇷
Threat.live
2026-05-28 07:25:02
(1 week ago)
Threat.live: Web Scan
Web App Attack
🇬🇧
Apache
2026-05-28 02:58:12
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (JP/Japan/236.237.104.34.bc.goog ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (JP/Japan/236.237.104.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇦🇹
Hosemacht
2026-05-28 02:51:16
(1 week ago)
Multiple Web-Attacks
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 07:24:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 03:24:13.389447 2026] [security2:error] [pid 21721:tid 21721] [client 34.104.237.236:39058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aufflammen.com"] [uri "/.git/config"] [unique_id "ahacHQzTz_QpJYSp2vtRDwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 06:45:44
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 02:45:38.295995 2026] [security2:error] [pid 12125:tid 12125] [client 34.104.237.236:42342] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.bradjohnsonqh.com"] [uri "/.git/config"] [unique_id "ahaTEsagvbrGWvuOxkJ1CAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 06:06:03
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 02:05:57.844572 2026] [security2:error] [pid 27447:tid 27447] [client 34.104.237.236:37230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.drlaurengardner.com"] [uri "/.git/config"] [unique_id "ahaJxT1atTyLICmMFF4bwgAAADU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 05:27:02
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 01:26:55.808451 2026] [security2:error] [pid 26679:tid 26679] [client 34.104.237.236:57860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.stewhist.org"] [uri "/.git/config"] [unique_id "ahaAnzAqgp2KjJrZRVSrDgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 04:39:05
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 00:39:01.386661 2026] [security2:error] [pid 23357:tid 23357] [client 34.104.237.236:42902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.jhbookdesign.com"] [uri "/.git/config"] [unique_id "ahZ1ZcLVehRmmSqsQxAOhgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
Roper123
2026-05-27 04:12:58
(1 week ago)
Web app attack
Web App Attack
🇺🇸
TPI-Abuse
2026-05-27 04:00:16
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.237.236 (236.237.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed May 27 00:00:09.689371 2026] [security2:error] [pid 26785:tid 26785] [client 34.104.237.236:45684] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.shelbysmoak.com"] [uri "/.git/config"] [unique_id "ahZsSdwNHKKLE-quWMBI1QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-27 02:05:37
(1 week ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇩🇪
Bedios GmbH
2026-05-27 01:49:22
(1 week ago)
Login credentials theft attempt
Hacking
🇨🇭
4server
2026-05-27 00:21:05
(1 week ago)
[WedMay2702:20:59.1594012026][security2:error][pid240493:tid240719][client34.104.237.236:0]ModSecuri ...
show more
[WedMay2702:20:59.1594012026][security2:error][pid240493:tid240719][client34.104.237.236:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"364\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"ftp.distributori-automatici-ticino.ch\"][uri\"/.git/config\"][unique_id\"ahY461ZWvdSbiSwtlkbMbAAAARI\"]
show less
Hacking
Web App Attack