🇩🇪
klaus_ph
2026-09-27 03:02:49
UTC ·
(1 month ago)
2026-09-26 00:34:25,597 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.166.157.71
...
Bad Web Bot
🇩🇪
klaus_ph
2026-09-23 14:41:45
UTC ·
(1 month ago)
2026-09-23 01:19:07,232 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.166.157.71
...
Bad Web Bot
2026-09-20 16:22:22
UTC ·
(1 month ago)
[Sun Sep 20 18:22:21.049673 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/phpinfo.php' not found or unable to stat
[Sun Sep 20 18:22:21.140352 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/ ...
show more
[Sun Sep 20 18:22:21.049673 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/phpinfo.php' not found or unable to stat
[Sun Sep 20 18:22:21.140352 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/info.php' not found or unable to stat
[Sun Sep 20 18:22:21.229818 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/php.php' not found or unable to stat
[Sun Sep 20 18:22:21.326229 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/i.php' not found or unable to stat
[Sun Sep 20 18:22:21.416445 2026] [php:error] [pid 2473190] [client 34.166.157.71:46032] script '/var/www/html/pi.php' not found or unable to stat
...
show less
Bad Web Bot
🇸🇬
naveeddaros
2026-09-20 16:20:06
UTC ·
(1 month ago)
HTTP Flood DDoS attack detected
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-20 16:18:44
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:18:39.208026 2026] [security2:error] [pid 15795:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 12:18:39.208026 2026] [security2:error] [pid 15795:tid 15795] [client 34.166.157.71:48090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "daddysmilkclub.com"] [uri "/.git/config"] [unique_id "arAHXzddSBhFh8v-77QzSgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
big-cloud.nl
2026-09-20 15:35:11
UTC ·
(1 month ago)
Try to access /.git/config
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-20 15:12:00
UTC ·
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇵🇱
lns.bz
2026-09-20 11:49:47
UTC ·
(1 month ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
🇳🇱
Site.eu
2026-09-20 10:18:50
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
pm33
2026-09-20 10:11:36
UTC ·
(1 month ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
🇸🇪
vaia.cloud
2026-09-20 10:05:01
UTC ·
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇬🇧
relianoid.com
2026-09-20 07:30:21
UTC ·
(1 month ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
2026-09-20 07:16:07
UTC ·
(1 month ago)
[news.tmg.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-19 09:15:16
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 05:15:08.486781 2026] [security2:error] [pid 2734:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 19 05:15:08.486781 2026] [security2:error] [pid 2734:tid 2734] [client 34.166.157.71:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.earscript.net"] [uri "/.git/config"] [unique_id "aq5SnLcTy762fgjcl29IIQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 23:55:48
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:55:42.439404 2026] [security2:error] [pid 15034:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.166.157.71 (71.157.166.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 19:55:42.439404 2026] [security2:error] [pid 15034:tid 15034] [client 34.166.157.71:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.distro.media"] [uri "/.git/config"] [unique_id "aq3PfvDkxl7lf9TD8HOIFgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
