|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇩🇪
raph
|
|
[DOT FILES] crawler *.env*, .git*, .config*, etc.
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ftpbd] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.41.129.186 - - \[09/Oct/2026:01:14:04 +0200\] "GET /.ssh/id_rsa HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\ ...
show more
[ftpbd] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.41.129.186 - - \[09/Oct/2026:01:14:04 +0200\] "GET /.ssh/id_rsa HTTP/1.1" 404 2101 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; ClaudeBot/1.0\; [email protected]\)"
34.41.129.186 - - \[09/Oct/2026:01:14:04 +0200\] "GET /.htpasswd HTTP/1.1" 403 7393 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; [email protected]\)"
34.41.129.186 - - \[09/Oct/2026:01:14:04 +0200\] "GET /.ssh/id_ed25519 HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Bravebot/1.0\; +https://brave.com/search/\)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.41.129.186 - - [09/Oct/2026:00:47:55 +0200] "GET /static../.env HTTP/2.0" 403 346 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.c ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.41.129.186 - - [09/Oct/2026:00:47:55 +0200] "GET /static../.env HTTP/2.0" 403 346 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
radardatelecom
|
|
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇿🇦
vanderhost
|
|
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/gcp-credentials.json via rule: /config
|
Web App Attack
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:53:19.896622 2026] [security2:error] [pid 2591:tid 2 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:53:19.896622 2026] [security2:error] [pid 2591:tid 2591] [client 34.41.129.186:49520] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tremulant.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tremulant.com"] [uri "/z9x8c7v6b5-debug-trigger-tremulant.com"] [unique_id "asgQz1r9SsVgAXERghnOCwAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
fail2ban: plesk-modsecurity jail on genckocaeli.com
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:17:46.262583 2026] [security2:error] [pid 17625:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:17:46.262583 2026] [security2:error] [pid 17625:tid 17625] [client 34.41.129.186:33062] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||my1611.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "my1611.com"] [uri "/z9x8c7v6b5-debug-trigger-my1611.com"] [unique_id "asgIegNSarJEhYfjl2iVdQAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:01:04.349409 2026] [security2:error] [pid 17227:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.41.129.186 (186.129.41.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 17:01:04.349409 2026] [security2:error] [pid 17227:tid 17227] [client 34.41.129.186:59082] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||juliansongs.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "juliansongs.com"] [uri "/z9x8c7v6b5-debug-trigger-juliansongs.com"] [unique_id "asgEkImI1dr-NSYFCplKHwAAABY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 34.41.129.186 (US/United States/186.129.41.34.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
🇫🇮
etasoft
|
|
Auto-blocked by WP Security AI: Rate limit: 3 violaciones
|
Bad Web Bot
|
|
🇩🇪
bescared
|
|
F2B - Malicious activity detected. URL Probing. -c23856ef-
|
Hacking
Bad Web Bot
Web App Attack
|
