🇳🇱
Site.eu
2026-08-09 13:02:21
UTC ·
(3 months ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
klaus_ph
2026-08-08 11:34:23
UTC ·
(3 months ago)
...
Bad Web Bot
🇩🇪
Bedios GmbH
2026-08-08 06:35:04
UTC ·
(3 months ago)
Login credentials theft attempt
Hacking
🇩🇪
BlueWire Hosting
2026-08-08 05:29:25
UTC ·
(3 months ago)
Probing websites for vulnerabilities
Web App Attack
🇩🇪
AetherFox
2026-08-08 05:05:39
UTC ·
(3 months ago)
AetherFox VoidGuard detected: [Sat Aug 08 05:05:38.027563 2026] [authz_core:error] [pid 640896:tid 640900] [client 34.124.149.77:55874] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sat Aug 08 05:05:38.381323 2026] [authz_c ...
show more
AetherFox VoidGuard detected: [Sat Aug 08 05:05:38.027563 2026] [authz_core:error] [pid 640896:tid 640900] [client 34.124.149.77:55874] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sat Aug 08 05:05:38.381323 2026] [authz_core:error] [pid 640896:tid 640905] [client 34.124.149.77:55874] AH01630: client denied by server configuration: proxy:https://[MASKED]/.hermes/.env
[Sat Aug 08 05:05:38.563160 2026] [authz_core:error] [pid 640896:tid 640913] [client 34.124.149.77:55874] AH01630: client denied by server configuration: proxy:https://[MASKED]/.hermes/auth.json
[Sat Aug 08 05:05:38.707441 2026] [authz_core:error] [pid 640896:tid 640915] [client 34.124.149.77:55904] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-json
[Sat Aug 08 05:05:38.707452 2026] [authz_core:error] [pid 640896:tid 640908] [client 34.124.149.77:55886] AH01630: client denied by server configuration: proxy:https://[MASKED]/login
...
show less
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-08-08 04:52:20
UTC ·
(3 months ago)
Exploit scan from 34.124.149.77. GET /.git/config HTTP/2.0.
Web App Attack
🇺🇸
TPI-Abuse
2026-08-08 03:35:28
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 34.124.149.77 (77.149.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 23:35:23.532219 2026] [security2:error] [pid 4080394:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.124.149.77 (77.149.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 07 23:35:23.532219 2026] [security2:error] [pid 4080394:tid 4080401] [client 34.124.149.77:54004] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.trumpinvadesus.n2play.net|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.trumpinvadesus.n2play.net"] [uri "/rclone.conf"] [unique_id "anaj-__VN0yfwgECmrJ4jQAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-08-08 02:47:59
UTC ·
(3 months ago)
[SatAug0804:47:53.0524492026][security2:error][pid839824:tid839930][client34.124.149.77:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLO ...
show more
[SatAug0804:47:53.0524492026][security2:error][pid839824:tid839930][client34.124.149.77:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.hostingedominio.net\"][uri\"/.ssh/known_hosts\"][unique_id\"anaY2ev-I39-hU4CM2hjRAAAAZg\"]
show less
Hacking
Web App Attack
🇮🇹
mgarofano80
2026-08-08 02:03:01
UTC ·
(3 months ago)
Brute-Force
Web App Attack
🇬🇧
noise.agency
2026-08-08 01:25:28
UTC ·
(3 months ago)
34.124.149.77 (SG/Singapore/77.149.124.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
🇺🇸
entangled_mongoose
2026-08-08 00:50:29
UTC ·
(3 months ago)
Probed /wp-json.
Web App Attack
🇩🇪
gadix
2026-08-08 00:42:14
UTC ·
(3 months ago)
[08/Aug/2026:02:42:11.995025 +0200] anZ7Y5O3QOySFcQJqa92EwAAABg 34.124.149.77 38464 127.0.0.1 7081
[08/Aug/2026:02:42:11.996045 +0200] anZ7Y5O3QOySFcQJqa92FAAAABY 34.124.149.77 38470 127.0.0.1 7081
[08/Aug/2026:02:42:12.192395 +0200] anZ7ZAZgW0aZbGju ...
show more
[08/Aug/2026:02:42:11.995025 +0200] anZ7Y5O3QOySFcQJqa92EwAAABg 34.124.149.77 38464 127.0.0.1 7081
[08/Aug/2026:02:42:11.996045 +0200] anZ7Y5O3QOySFcQJqa92FAAAABY 34.124.149.77 38470 127.0.0.1 7081
[08/Aug/2026:02:42:12.192395 +0200] anZ7ZAZgW0aZbGjuKJFFKAAAAEk 34.124.149.77 38540 127.0.0.1 7081
...
show less
Web App Attack
🇩🇪
pscriptos
2026-08-08 00:04:58
UTC ·
(3 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇯🇵
bokumin.org
2026-08-07 23:57:49
UTC ·
(3 months ago)
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.aws/config"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
Web App Attack
🇬🇧
Apache
2026-08-07 23:56:12
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.124.149.77 (SG/Singapore/77.149.124.34.bc.googleusercontent.com): 5 in the last 300 secs
Brute-Force
Web App Attack