🇧🇪
boxed-it
2026-08-10 07:23:44
(1 month ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇮🇹
ciccio diddo
2026-08-09 07:29:52
(1 month ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇺🇸
jormaster3k
2026-08-09 07:25:55
(1 month ago)
Attack against Apache (too many 404s)
Web App Attack
Anonymous
2026-08-09 07:12:51
(1 month ago)
Aggressive web scan
Web App Attack
🇮🇩
Burayot
2026-08-09 03:42:17
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.106.197.73 (US/United States/73. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.106.197.73 (US/United States/73.197.106.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
🇩🇪
webanyone
2026-08-09 02:31:25
(1 month ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
Anonymous
2026-08-08 20:08:10
(1 month ago)
34.106.197.73 - - [08/Aug/2026:22:08:07 +0200] "GET /.git/config HTTP/1.1" 403 164 "-" "Mozilla/5.0 ...
show more
34.106.197.73 - - [08/Aug/2026:22:08:07 +0200] "GET /.git/config HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:07 +0200] "GET /.aws/credentials HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:07 +0200] "GET /.git/HEAD HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:08 +0200] "GET /z9x8c7v6b5-debug-trigger-jitinspections.com HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:08 +0200] "GET /.aws/config HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:08 +0200] "GET /wp-json HTTP/1.1" 403 164 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
34.106.197.73 - - [08/Aug/2026:22:08:08 +0200] "GET /.git-credentials
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-08 19:19:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.106.197.73 (73.197.106.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.197.73 (73.197.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:19:47.986888 2026] [security2:error] [pid 1293007:tid 1293017] [client 34.106.197.73:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindgardens.com"] [uri "/.git/config"] [unique_id "aneBU4atqJ9fTPgbs2qKTAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇴
Bots.go.to.hell
2026-08-08 17:44:24
(1 month ago)
This IP was detected by CrowdSec triggering custom/http-bad-crawler-ban
Web App Attack
Bad Web Bot
Anonymous
2026-08-08 17:41:35
(1 month ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇬🇧
consul.to
2026-08-08 14:53:50
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-08-08 14:40:19
(1 month ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
bazter.pro
2026-08-08 12:14:21
(1 month ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-08-08 11:07:01
(1 month ago)
Automated web scanner. Requested suspicious paths: /config.php.bak | /auth.json | /admin/login | /co ...
show more
Automated web scanner. Requested suspicious paths: /config.php.bak | /auth.json | /admin/login | /configuration.php.bak | /graphql | /user/login | /console | /login | /api/graphql | /auth/login | /.env.swp | /application.yml | /web/.env | /application.properties | /.env.dev | /public/.env | /wp-json | /account | /z9x8c7v6b5-debug-trigger-api.tigzig.com | /core/.env | /v1/graphql | /bootstrap.yml | /config/secrets.yml | /bootstrap.properties | /config/application.properties | /actuator/env | /appsettings.Production.json | /appsettings.Development. UTC: 2026-08-08 10:12:09.
show less
Web App Attack
Anonymous
2026-08-08 11:02:18
(1 month ago)
34.106.197.73 - - [08/Aug/2026:02:24:06 -0500] "GET /.env.php.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 ...
show more
34.106.197.73 - - [08/Aug/2026:02:24:06 -0500] "GET /.env.php.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.106.197.73
34.106.197.73 - - [08/Aug/2026:02:24:06 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.106.197.73
34.106.197.73 - - [08/Aug/2026:02:24:06 -0500] "GET /.env.swp HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.106.197.73
34.106.197.73 - - [08/Aug/2026:02:24:07 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.106.197.73
34.106.197.73 - - [08/Aug/2026:02:24:07 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-Use
...
show less
Brute-Force
Bad Web Bot
Web App Attack