🇩🇪
macrob
2026-08-16 05:43:55
UTC ·
(2 months ago)
2026/08/16 05:43:54 [error] 1977441#1977441: *485076222 access forbidden by rule, client: 34.24.152.30, server: finami.mx, request: "GET /.env.local HTTP/2.0", host: "finami.mx"
2026/08/16 05:43:54 [error] 1977440#1977440: *485076939 access forbidden ...
show more
2026/08/16 05:43:54 [error] 1977441#1977441: *485076222 access forbidden by rule, client: 34.24.152.30, server: finami.mx, request: "GET /.env.local HTTP/2.0", host: "finami.mx"
2026/08/16 05:43:54 [error] 1977440#1977440: *485076939 access forbidden by rule, client: 34.24.152.30, server: finami.mx, request: "GET /.git/HEAD HTTP/2.0", host: "finami.mx"
2026/08/16 05:43:54 [error] 1977441#1977441: *485076488 access forbidden by rule, client: 34.24.152.30, server: finami.mx, request: "GET /.mcp.json HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇬🇧
consul.to
2026-08-16 05:15:45
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
2026-08-16 05:03:05
UTC ·
(2 months ago)
Aggressive web scan
Web App Attack
🇩🇪
updown.io
2026-08-15 23:03:11
UTC ·
(2 months ago)
{"level":"info","ts":1786834989.086068,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.24.152.30","remote_port":"46146","client_ip":"34.24.152.30","proto":"HTTP/1.1","method":"GET","host":"p5mp.status.updown.io","ur ...
show more
{"level":"info","ts":1786834989.086068,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.24.152.30","remote_port":"46146","client_ip":"34.24.152.30","proto":"HTTP/1.1","method":"GET","host":"p5mp.status.updown.io","uri":"/.aws/credentials","headers":{"User-Agent":["Mozilla/5.0 (compatible; Google-Extended/1.0; +http://www.google.com/bot.html)"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"p5mp.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00008412,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1786834989.0874462,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.24.152.30","remote_port":"46066","client_ip":"34.24.152.30","proto":
...
show less
DDoS Attack
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-15 22:08:22
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇳🇿
Antinson
2026-08-15 22:03:50
UTC ·
(2 months ago)
Scraping with a high error ratio and request rate Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-15 21:49:18
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:49:13.902300 2026] [security2:error] [pid 29376:tid 29 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:49:13.902300 2026] [security2:error] [pid 29376:tid 29376] [client 34.24.152.30:43486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tavo.info"] [uri "/@fs/../.env"] [unique_id "aoDe2Y1SZdj6XdQnuwXtPwAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-08-15 21:38:00
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
BlueWire Hosting
2026-08-15 21:30:29
UTC ·
(2 months ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection
🇮🇹
VHosting
2026-08-15 21:20:06
UTC ·
(2 months ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 21:18:29
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:18:25.830470 2026] [security2:error] [pid 31610:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:18:25.830470 2026] [security2:error] [pid 31610:tid 31610] [client 34.24.152.30:48154] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.tatethegreat.com"] [uri "/static../.env"] [unique_id "aoDXoTzg9ptjYWaSlKmsVwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 21:02:08
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:02:00.909835 2026] [security2:error] [pid 21436:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 17:02:00.909835 2026] [security2:error] [pid 21436:tid 21436] [client 34.24.152.30:15754] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.taste.l3l4.com"] [uri "/.env.local"] [unique_id "aoDTyMDioiz7iMDSVy-kpwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-15 20:27:29
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:27:23.208222 2026] [security2:error] [pid 9933:tid 993 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.24.152.30 (30.152.24.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 15 16:27:23.208222 2026] [security2:error] [pid 9933:tid 9933] [client 34.24.152.30:34576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.targetbinario.com"] [uri "/.env"] [unique_id "aoDLqwD0xKIMIN1hIfgKTwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-15 20:06:52
UTC ·
(2 months ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
COMAITE
2026-08-15 20:04:18
UTC ·
(2 months ago)
Suspicious URL access.
Web App Attack