🇮🇳
evicky2002
2026-08-09 06:00:00
UTC ·
(3 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-08-09 04:33:59
UTC ·
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇫🇷
Baking333
2026-08-08 23:01:02
UTC ·
(3 months ago)
[redacted] 34.180.83.27 - - [08/Aug/2026:22:12:04 +0100] "GET /api/.env HTTP/1.1" 302 1581 0/45489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" [redacted] 34.180.83.27 - - [08/Aug/202 ...
show more
[redacted] 34.180.83.27 - - [08/Aug/2026:22:12:04 +0100] "GET /api/.env HTTP/1.1" 302 1581 0/45489 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" [redacted] 34.180.83.27 - - [08/Aug/2026:22:12:04 +0100] "GET /.[redacted] HTTP/1.1" 302 1549 0/38268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot"
show less
Bad Web Bot
Web App Attack
🇫🇷
zulzeen
2026-08-08 22:39:22
UTC ·
(3 months ago)
[incypit-web] Banned by Fail2ban (Jail: syswarden-secretshunter)
Hacking
Web App Attack
Bad Web Bot
Port Scan
🇺🇸
legionMCCXV
2026-08-08 22:35:01
UTC ·
(3 months ago)
PHP/WordPress shell scanner on non-PHP site — repeated requests to .php paths returning 404.
Bad Web Bot
🇳🇱
Site.eu
2026-08-08 22:22:42
UTC ·
(3 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-08-08 21:28:16
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 17:28:09.555271 2026] [security2:error] [pid 248681:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 17:28:09.555271 2026] [security2:error] [pid 248681:tid 248681] [client 34.180.83.27:38242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rondeal.com"] [uri "/.git/config"] [unique_id "anefaUsLe76KjnG0QAd0lgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-08 21:23:44
UTC ·
(3 months ago)
XSS Attempt
Hacking
🇫🇷
Baking333
2026-08-08 21:12:04
UTC ·
(3 months ago)
[redacted] 34.180.83.27 - - [08/Aug/2026:22:12:02 +0100] "GET /.git/HEAD HTTP/1.1" 302 6768 0/42925 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" [redacted] 34.180.83.27 - - [08/Aug/20 ...
show more
[redacted] 34.180.83.27 - - [08/Aug/2026:22:12:02 +0100] "GET /.git/HEAD HTTP/1.1" 302 6768 0/42925 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" [redacted] 34.180.83.27 - - [08/Aug/2026:22:12:02 +0100] "GET /.aws/credentials HTTP/1.1" 302 6768 0/35490 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot" [redacted] 34.180.83.27 - - [08/Aug/2026:22:12:02 +0100] "GET /.aws/config HTTP/1.1" 302 6768 0/38204 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://[redacted]/bot"
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-08-08 21:08:37
UTC ·
(3 months ago)
6.529 requests from abuseipdb.com blacklisted IP (2mos1w4d)
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-08 20:03:14
UTC ·
(3 months ago)
(mod_security) mod_security (id:210730) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 16:03:09.906942 2026] [security2:error] [pid 2223144:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 16:03:09.906942 2026] [security2:error] [pid 2223144:tid 2223144] [client 34.180.83.27:37860] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.compliancedepts.com|F|2"] [data ".compliancedepts.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.compliancedepts.com"] [uri "/z9x8c7v6b5-debug-trigger-www.compliancedepts.com"] [unique_id "aneLffoZvm6EAoXRysgiqQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
screwlooseit.com.au
2026-08-08 19:26:06
UTC ·
(3 months ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/27.83.180.34.bc.googleusercontent.com
Web App Attack
🇺🇸
TPI-Abuse
2026-08-08 19:22:45
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:22:38.933492 2026] [security2:error] [pid 503279:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 15:22:38.933492 2026] [security2:error] [pid 503279:tid 503279] [client 34.180.83.27:59594] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.iacarbonell.com"] [uri "/.git/config"] [unique_id "aneB_hFoa6P1nUQCBXT5CgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-08 19:00:28
UTC ·
(3 months ago)
34.180.83.27 - - [08/Aug/2026:21:00:12 +0200] "GET /.env.php.bak HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)"
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-08 18:57:19
UTC ·
(3 months ago)
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 14:57:15.362720 2026] [security2:error] [pid 31002:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.180.83.27 (27.83.180.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 08 14:57:15.362720 2026] [security2:error] [pid 31002:tid 31002] [client 34.180.83.27:35138] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ibeautyexchange.com"] [uri "/.git/HEAD"] [unique_id "and8CyXNlXE-4KXAEKnDaQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack