🇩🇪
netclix.gr
2026-11-09 09:48:01
UTC ·
(1 hour ago)
(security_scan) Sensitive File Scan Blocked 34.169.225.83 (US/United States/83.225.169.34.bc.googleusercontent.com)
Hacking
2026-11-09 04:47:15
UTC ·
(6 hours ago)
34.169.225.83 - - [09/Nov/2026:05:46:56 +0100] "GET /info.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:46:57 +0100] "GET /php.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:46:59 +0100] "GET /i.php HTTP/1.1" 404 29626
34.169.2 ...
show more
34.169.225.83 - - [09/Nov/2026:05:46:56 +0100] "GET /info.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:46:57 +0100] "GET /php.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:46:59 +0100] "GET /i.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:01 +0100] "GET /pi.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:03 +0100] "GET /pinfo.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:04 +0100] "GET /test.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:06 +0100] "GET /phpinfo HTTP/1.1" 404 30264
34.169.225.83 - - [09/Nov/2026:05:47:08 +0100] "GET /p.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:09 +0100] "GET /debug.php HTTP/1.1" 404 29626
34.169.225.83 - - [09/Nov/2026:05:47:12 +0100] "GET /info HTTP/1.1" 404 30264
...
show less
Web Spam
Web App Attack
🇩🇪
ut-addicted.com
2026-11-09 03:27:13
UTC ·
(7 hours ago)
\[Mon Nov 09 04:27:11.470605 2026\] \[:error\] \[pid 3135:tid 140077181110016\] \[client 34.169.225.83:40514\] \[client 34.169.225.83\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/loca ...
show more
\[Mon Nov 09 04:27:11.470605 2026\] \[:error\] \[pid 3135:tid 140077181110016\] \[client 34.169.225.83:40514\] \[client 34.169.225.83\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 5\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "crx.it"\] \[uri "/.git/config"\] \[unique_id "avE9j87qqdA2Az8Dw-zKqwAAAM8"\]
show less
Brute-Force
Web App Attack
🇬🇧
Aetherweb Ark
2026-11-09 01:56:15
UTC ·
(9 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.169.225.83 (US/United States/83.225.169.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇩🇪
Philister11
2026-11-09 00:40:54
UTC ·
(10 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files (US/AS396982)
Web App Attack
Hacking
🇬🇧
consul.to
2026-11-09 00:11:29
UTC ·
(10 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-08 23:03:55
UTC ·
(12 hours ago)
Auto-ban: >3000 req/min op 2026-11-08
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-11-08 20:13:01
UTC ·
(14 hours ago)
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.169.225.83 - - [08/Nov/2026:21:12:41 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[cb-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.169.225.83 - - [08/Nov/2026:21:12:41 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-08 19:40:05
UTC ·
(15 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
CrownSync.uk
2026-11-08 18:40:17
UTC ·
(16 hours ago)
Automated detection: repeated HTTP 4xx scan-burst against a public web endpoint.
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:30:34
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.169.225.83 (83.225.169.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:30:31.311456 2026] [security2:error] [pid 5063:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.169.225.83 (83.225.169.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:30:31.311456 2026] [security2:error] [pid 5063:tid 5063] [client 34.169.225.83:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crown.365soft.top"] [uri "/.git/config"] [unique_id "avCjp4BfJXAzOQ-AWvRuoQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-08 15:35:02
UTC ·
(19 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇨🇭
leo1305
2026-11-08 15:33:35
UTC ·
(19 hours ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
🇩🇪
curiosity
2026-11-08 15:31:43
UTC ·
(19 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇧🇾
lns.bz
2026-11-06 22:20:22
UTC ·
(2 days ago)
.env scanning [BY]
Web App Attack
