🇩🇪
klaus_ph
2026-09-27 00:41:24
UTC ·
(1 month ago)
2026-09-25 23:06:07,809 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.146.83.53
...
Bad Web Bot
🇿🇦
conure.sh
2026-09-23 12:13:58
UTC ·
(1 month ago)
csagent: score 20.7: 404 noise floor x3, secrets grab x1, wp-config backup grab x1; 1 domain(s) in 1s
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-22 22:23:49
UTC ·
(1 month ago)
Brute-Force
Web App Attack
🇩🇰
RhQM
2026-09-22 16:44:16
UTC ·
(1 month ago)
Bad Web Bot
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 16:25:01
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:24:54.592809 2026] [security2:error] [pid 19569:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 12:24:54.592809 2026] [security2:error] [pid 19569:tid 19569] [client 34.146.83.53:35416] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prostar.industries"] [uri "/.env.local"] [unique_id "arKr1voNszGYqhbsrcSccgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-09-22 16:10:39
UTC ·
(1 month ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇵🇱
gandaflux
2026-09-22 15:43:41
UTC ·
(1 month ago)
34.146.83.53 [redacted-domain] - [22/Sep/2026:17:43:40 +0200] "GET /.env.save HTTP/1.1" 403 158 "-" "crusader-worker/1.0"
34.146.83.53 [redacted-domain] - [22/Sep/2026:17:43:40 +0200] "GET /wp-config.php.swp HTTP/1.1" 403 158 "-" "crusader-worker/1.0 ...
show more
34.146.83.53 [redacted-domain] - [22/Sep/2026:17:43:40 +0200] "GET /.env.save HTTP/1.1" 403 158 "-" "crusader-worker/1.0"
34.146.83.53 [redacted-domain] - [22/Sep/2026:17:43:40 +0200] "GET /wp-config.php.swp HTTP/1.1" 403 158 "-" "crusader-worker/1.0"
34.146.83.53 [redacted-domain] - [22/Sep/2026:17:43:40 +0200] "GET /wp-config.php~ HTTP/1.1" 403 158 "-" "crusader-worker/1.0"
show less
Web App Attack
🇺🇸
SLSLLC
2026-09-22 15:40:04
UTC ·
(1 month ago)
34.146.83.53 - - [22/Sep/2026:15:40:00 +0000] "GET /.env.backup HTTP/2.0" 404 401 "-" "crusader-worker/1.0"
...
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-22 15:36:30
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-09-22 15:23:05
UTC ·
(1 month ago)
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.local HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.en ...
show more
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env HTTP/1.1, GET /wp-config.php.swp HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.local HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /.env.backup HTTP/1.1
show less
Hacking
Web App Attack
🇩🇪
Viveronese
2026-09-22 14:52:05
UTC ·
(1 month ago)
HTTP vulnerability scanning
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 14:26:59
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:26:51.469436 2026] [security2:error] [pid 24295:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:26:51.469436 2026] [security2:error] [pid 24295:tid 24405] [client 34.146.83.53:37690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lapulperiagirona.com.webcraftestudio.com"] [uri "/.env.old"] [unique_id "arKQK0dQpGP7KdDfe2bv1QAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 13:44:14
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:44:08.575936 2026] [security2:error] [pid 18666:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.83.53 (53.83.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:44:08.575936 2026] [security2:error] [pid 18666:tid 18666] [client 34.146.83.53:60290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "horizontravelgroup.com"] [uri "/wp-config.php.bak"] [unique_id "arKGKKYIVUL2pysw7AK9xwAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-22 13:38:46
UTC ·
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-22 13:33:04
UTC ·
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack