🇩🇪
klaus_ph
2026-09-23 13:25:12
UTC ·
(1 month ago)
2026-09-23 00:39:27,978 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.147.128.244
...
Bad Web Bot
🇺🇸
Charlesiv
2026-09-21 10:02:12
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-21T08:05:52Z
Ray ID: a3e7913aeb98ba87
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) A ...
show more
Triggered Cloudflare WAF (firewallCustom) from GB.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/1.1 (GET method)
Endpoint: /
Timestamp: 2026-09-21T08:05:52Z
Ray ID: a3e7913aeb98ba87
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
🇸🇪
vaia.cloud
2026-09-21 09:50:03
UTC ·
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-21 09:16:31
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
Ano_Nym
2026-09-21 08:37:05
UTC ·
(1 month ago)
CrowdSec IDS alert on VPS 217.154.115.19 (DE). Scenario: crowdsecurity/http-sensitive-files
Web App Attack
🇫🇷
cydit.eu
2026-09-21 08:28:30
UTC ·
(1 month ago)
phpMyAdmin attack detected by fail2ban on thor.cydit.eu
Web App Attack
🇪🇸
robotstxt
2026-09-21 08:27:34
UTC ·
(1 month ago)
34.147.128.244 - - [21/Sep/2026:08:26:35 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/ ...
show more
34.147.128.244 - - [21/Sep/2026:08:26:35 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:08:26:35 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:08:26:35 +0000] "GET /.env.production HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:08:26:36 +0000] "GET /.env.staging HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:08:26:36 +0000] "GET /.env.developm
...
show less
Web App Attack
🇩🇪
XICTRON
2026-09-21 07:10:05
UTC ·
(1 month ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇺🇸
alecj.com
2026-09-21 07:03:28
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇪🇸
robotstxt
2026-09-21 06:58:21
UTC ·
(1 month ago)
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/ ...
show more
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env.production HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env.staging HTTP/1.1" 403 208 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.147.128.244"
34.147.128.244 - - [21/Sep/2026:06:57:26 +0000] "GET /.env.developm
...
show less
Web App Attack
🇬🇧
consul.to
2026-09-21 06:45:57
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇿🇦
conure.sh
2026-09-21 03:27:35
UTC ·
(1 month ago)
csagent: score 20.8: 404 noise floor x3, secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 02:24:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.147.128.244 (244.128.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:24:51.082325 2026] [security2:error] [pid 16286:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.128.244 (244.128.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 22:24:51.082325 2026] [security2:error] [pid 16286:tid 16286] [client 34.147.128.244:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "analisis.luisguacache.com"] [uri "/.git/config"] [unique_id "arCVc17ZmDUuEAyvSGgZhQAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-09-20 22:49:52
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-20 21:53:41
UTC ·
(1 month ago)
(modsecurity) srv101 ModSecurity 34.147.128.244 (GB/United Kingdom/244.128.147.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
