🇧🇷
radardatelecom
2026-09-30 22:26:03
UTC ·
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-30 22:01:38
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-29.
Web App Attack
SSH
Hacking
🇳🇱
e.fierstra
2026-09-30 04:26:35
UTC ·
(1 month ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 04:21:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:21:20.189515 2026] [security2:error] [pid 13299:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:21:20.189515 2026] [security2:error] [pid 13299:tid 13299] [client 34.141.115.112:57482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||internet-brochures.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "internet-brochures.com"] [uri "/z9x8c7v6b5-debug-trigger-internet-brochures.com"] [unique_id "aryOQNPSBy4sJ4_23inuYAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-30 03:15:53
UTC ·
(1 month ago)
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.141.115.112 - - [30/Sep/2026:05:15:38 +0200] "GET /.env.example HTTP/1.1" 404 463 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.g ...
show more
[ti-27al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.141.115.112 - - [30/Sep/2026:05:15:38 +0200] "GET /.env.example HTTP/1.1" 404 463 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.141.115.112 - - [30/Sep/2026:05:15:38 +0200] "GET /userfiles/x?path=../../.env HTTP/1.1" 404 463 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-09-30 02:20:39
UTC ·
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.141.115.112 (DE/Germany/Hesse/Frankfurt am Main/112.115.141.34.bc.googleusercontent.com)
Bad Web Bot
🇫🇷
Lino Project
2026-09-30 02:02:42
UTC ·
(1 month ago)
34.141.115.112 - - [30/Sep/2026:04:02:39 +0200] "GET /user/login HTTP/1.1" 302 517 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.141.115.112 - - [30/Sep/2026:04:02:39 +0200] " ...
show more
34.141.115.112 - - [30/Sep/2026:04:02:39 +0200] "GET /user/login HTTP/1.1" 302 517 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.141.115.112 - - [30/Sep/2026:04:02:39 +0200] "POST /api/graphql HTTP/1.1" 302 519 "https://www.incucinaconpatty.it" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:47:36
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:47:31.003301 2026] [security2:error] [pid 21451:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:47:31.003301 2026] [security2:error] [pid 21451:tid 21451] [client 34.141.115.112:54562] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.infraredovens.net.daveweisman.com|F|2"] [data ".infraredovens.net.daveweisman.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.infraredovens.net.daveweisman.com"] [uri "/z9x8c7v6b5-debug-trigger-www.infraredovens.net.daveweisman.com"] [unique_id "arxqMxJWS8JBQf5DIoPznAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-09-30 01:34:11
UTC ·
(1 month ago)
.env scanning [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 01:20:48
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:20:41.194136 2026] [security2:error] [pid 7692:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 21:20:41.194136 2026] [security2:error] [pid 7692:tid 7797] [client 34.141.115.112:38036] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||newleafpro.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "newleafpro.com"] [uri "/z9x8c7v6b5-debug-trigger-newleafpro.com"] [unique_id "arxj6XkpNCAW1nicYM9_VAAAAQU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇿
antihack.anarchista.xyz
2026-09-29 23:37:23
UTC ·
(1 month ago)
404 burst: 20 hits in 5 min, URI /storage/logs/laravel.log, Ref , UA Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)
Brute-Force
Web App Attack
Bad Web Bot
🇧🇪
cmbplf
2026-09-29 23:35:16
UTC ·
(1 month ago)
824 requests with url.path */@fs/*
255 requests with url.path */proc/*
222 requests with url.path *.php.bak
183 requests with url.path *.ssh/*
176 requests with url.path *.aws/*
173 requests with url.path *credentials.json
167 requests with ur ...
show more
824 requests with url.path */@fs/*
255 requests with url.path */proc/*
222 requests with url.path *.php.bak
183 requests with url.path *.ssh/*
176 requests with url.path *.aws/*
173 requests with url.path *credentials.json
167 requests with url.path *config.json
show less
Brute-Force
Bad Web Bot
🇩🇪
FeG Deutschland
2026-09-29 23:15:03
UTC ·
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇺🇸
valornode
2026-09-29 22:48:50
UTC ·
(1 month ago)
Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-admin-interface-probing | ASN: 396982 (GOOGLE-CLOUD-PLATFORM) | Country: DE | Range: 34.128.0.0/11
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-09-29 22:42:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:42:20.961711 2026] [security2:error] [pid 8158:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.115.112 (112.115.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:42:20.961711 2026] [security2:error] [pid 8158:tid 8158] [client 34.141.115.112:41962] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||idmadventures.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "idmadventures.com"] [uri "/z9x8c7v6b5-debug-trigger-idmadventures.com"] [unique_id "arw-zB-zmhDFyjRNr0zTpwAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
