2026-07-19 04:27:32
(15 minutes ago)
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 1167 " ...
show more
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 1167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] "
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.git-credentials HTTP/2.0" 403 1167 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.git/config HTTP/2.0" 403 1167 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.git/HEAD HTTP/2.0" 403 1167 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.155.54.2 - - [19/Jul/2026:01:27:31 -0300] "GET /.gitlab-ci.yml HTTP/2.0" 403 1167 "-" "anthropic-ai"
...
show less
Port Scan
🇩🇪
BlueWire Hosting
2026-07-19 04:15:25
(27 minutes ago)
Probing websites for vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 03:43:00
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 23:42:53.377105 2026] [security2:error] [pid 2092039:tid 2092039] [client 34.155.54.2:56158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vankesselporsche.com"] [uri "/.git/config"] [unique_id "alxHvXnFtV-S6cLcxM1vrwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 03:26:23
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 23:26:15.582704 2026] [security2:error] [pid 31515:tid 31515] [client 34.155.54.2:48128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "vandermeerlab.org"] [uri "/.openclaw/.env"] [unique_id "alxD1yI9n55uWn9GWyYpRwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
paissangroup
2026-07-19 03:16:00
(1 hour ago)
Multiple WAF Violations
Web App Attack
🇩🇪
SiyCah
2026-07-19 03:00:01
(1 hour ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-07-19 02:56:59
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.155.54.2 (FR/France/2.54.155.34.bc.g ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.155.54.2 (FR/France/2.54.155.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
Hazzard
2026-07-19 02:47:01
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇸🇮
valryx
2026-07-19 02:39:08
(2 hours ago)
🛡️ Fail2ban - Jail: nginx-malicious-bots
Log entries:
34.155.54.2 - - [19/Jul/2026:02:39:06 +0000] " ...
show more
🛡️ Fail2ban - Jail: nginx-malicious-bots
Log entries:
34.155.54.2 - - [19/Jul/2026:02:39:06 +0000] "GET /web.config HTTP/1.1" 404 117 "-" "Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"
show less
Bad Web Bot
🇫🇷
masterguru
2026-07-19 02:33:47
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-19 01:56:47
(2 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 21:56:39.719849 2026] [security2:error] [pid 1510:tid 1510] [client 34.155.54.2:38046] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vampireproductions.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vampireproductions.com"] [uri "/z9x8c7v6b5-debug-trigger-vampireproductions.com"] [unique_id "alwu17G51Rkm_7vwL74tRAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-07-19 01:30:36
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-07-19 00:47:28
(3 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.155.54.2 (2.54.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 18 20:47:24.328265 2026] [security2:error] [pid 4688:tid 4688] [client 34.155.54.2:48482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||vaerobics.com|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "vaerobics.com"] [uri "/rclone.conf"] [unique_id "alwenL5WB_PDEYKbFJg21wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-07-19 00:38:02
(4 hours ago)
Restricted File Access Attempt. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇺🇸
kbeezie
2026-07-19 00:22:14
(4 hours ago)
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /host.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (comp ...
show more
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /host.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)"
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /ssl/server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)"
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /privatekey.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot"
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] "
34.155.54.2 - - [18/Jul/2026:20:22:13 -0400] "GET /ssl/localhost.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot"
show less
Bad Web Bot
Web App Attack