🇳🇱
homeshowdomain.nl
2026-09-16 22:00:23
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-15.
show less
Web App Attack
SSH
Hacking
🇩🇪
FD-IX
2026-09-16 11:10:49
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-09-16 08:16:30
(3 days ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.131.192.77 (IN/India/77.192.131.34.bc. ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.131.192.77 (IN/India/77.192.131.34.bc.googleusercontent.com)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-16 02:12:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.131.192.77 (77.192.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.192.77 (77.192.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:12:23.728443 2026] [security2:error] [pid 25337:tid 25337] [client 34.131.192.77:40822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bee432.com"] [uri "/.git/config"] [unique_id "aqn7B6sXycaQsAH-sN26DAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-09-16 00:51:07
(3 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇳🇱
middelkoopcc
2026-09-16 00:13:01
(3 days ago)
2026-09-16 02:10:21 GET /.git/config [301] && 2026-09-16 02:10:22 GET /.env [301] && 2026-09-16 02:1 ...
show more
2026-09-16 02:10:21 GET /.git/config [301] && 2026-09-16 02:10:22 GET /.env [301] && 2026-09-16 02:10:25 GET /.env.bak [301] && 140 more within 20 minutes
show less
Web App Attack
🇳🇱
Savvii
2026-09-15 18:20:08
(3 days ago)
20 attempts against mh_ha-misbehave-ban on pf221113
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:04:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.131.192.77 (77.192.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.131.192.77 (77.192.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:03:58.426472 2026] [security2:error] [pid 21969:tid 21969] [client 34.131.192.77:34420] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "beckersystems.beckersystems.com"] [uri "/.git/config"] [unique_id "aql6ftJNgT2_L-BHI9_KngAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-15 07:15:04
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
pscriptos
2026-09-15 05:27:49
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇮🇹
VHosting
2026-06-16 07:10:05
(3 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-06-16 06:46:04
(3 months ago)
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000-193)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-16 06:33:32
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 34.131.192.77 (77.192.131.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.131.192.77 (77.192.131.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 16 02:33:26.744730 2026] [security2:error] [pid 24559:tid 24559] [client 34.131.192.77:40660] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.cc.austinbiblestudents.org|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.cc.austinbiblestudents.org"] [uri "/backup.sql"] [unique_id "ajDuNg_hLHWXektnNdomlQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-06-15 21:51:53
(3 months ago)
34.131.192.77 - - [15/Jun/2026:21:51:49 +0000] "GET /mail.zip HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Ma ...
show more
34.131.192.77 - - [15/Jun/2026:21:51:49 +0000] "GET /mail.zip HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36" "-"
34.131.192.77 - - [15/Jun/2026:21:51:49 +0000] "GET /mailer.zip HTTP/1.1" 404 180 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.62 YaBrowser/19.9.0.918 (beta) Yowser/2.5 Safari/537.36" "-"
34.131.192.77 - - [15/Jun/2026:21:51:53 +0000] "GET /mailer/sendgrid.js HTTP/1.1" 404 146 "-" "Opera/10.61 (J2ME/MIDP; Opera Mini/5.1.21219/19.999; en-US; rv:1.9.3a5) WebKit/534.5 Presto/2.6.30" "-"
34.131.192.77 - - [15/Jun/2026:21:51:53 +0000] "GET /mailer/sendgrid.py HTTP/1.1" 404 146 "-" "Mozilla/5.0 (iPad; CPU OS 13_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) GSA/79.0.259819395 Mobile/17A5556d Safari/604.1" "-"
34.131.192.77 - - [15/Jun/2026:21:51:53 +0000] "GET /mail/sendgrid.py HTTP/1.1" 404 180 "-" "Mozilla/5.0 (X11; U; Linux x
...
show less
Bad Web Bot
🇳🇱
Savvii
2026-06-15 19:53:05
(3 months ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack