🇳🇱
Site.eu
2026-08-12 04:00:42
(1 week ago)
Excessive multi-domain requests
Brute-Force
2026-08-12 03:04:12
(1 week ago)
Aggressive web scan
Web App Attack
🇿🇦
conure.sh
2026-08-11 20:14:08
(1 week ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-08-11 19:45:04
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.53.54.51 (51.54.53.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.53.54.51 (51.54.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 15:44:56.020066 2026] [security2:error] [pid 922419:tid 922419] [client 34.53.54.51:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.dentguyvt.com"] [uri "/static../.env"] [unique_id "ant7uIiVkKFb6olP-55xdQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
peaceharbor
2026-08-11 19:30:04
(1 week ago)
Swatter: score=91 intel=abuseipdb:confidence100(100) rule=critical_badpath recidivism=4/7d crit-sing ...
show more
Swatter: score=91 intel=abuseipdb:confidence100(100) rule=critical_badpath recidivism=4/7d crit-single
show less
Web App Attack
Port Scan
🇮🇹
VHosting
2026-08-11 19:20:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
4server
2026-08-11 19:11:22
(1 week ago)
[TueAug1121:11:20.2364162026][security2:error][pid2453090:tid2453116][client34.53.54.51:0]ModSecurit ...
show more
[TueAug1121:11:20.2364162026][security2:error][pid2453090:tid2453116][client34.53.54.51:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"/etc/passwd\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"141\"][id\"347009\"][rev\"1\"][msg\"Atomicorp.comWAFRules:ProtectedFileaccessdenied\"][severity\"CRITICAL\"][hostname\"cpcontacts.danielasilvia.ch\"][uri\"/static../etc/passwd\"][unique_id\"antz2HXLkur6W8tZkjy5ngAAANc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇫🇮
mnazibo
2026-08-11 19:00:07
(1 week ago)
Date: 11/Aug/2026 21:20:00 | Reported IP: 34.53.54.51 mod_security | id: 930100 930110 930120 930130 ...
show more
Date: 11/Aug/2026 21:20:00 | Reported IP: 34.53.54.51 mod_security | id: 930100 930110 930120 930130 930140 931100 934110 | US/group.my_domain/- | Connections: 207 | Blocked: Permanent Block: [LF_MODSEC] | URIs: /admin/config?cmd=cat+/root/.aws/credentials; /admin/.env; /.anthropic/config.json; /api/..;/actuator/env; /api/.aws/credentials; /api/config.json; /api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F; /api/download?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F; /api/.env; /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F; /api/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F; /api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F; /api/proxy?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2Fiam%2Fsecurity-credentials%2F; /api/v1/fetch?url=http%3A%2F%2F169.254.169.254%2Flatest%2Fmeta-data%2F;
show less
SQL Injection
Brute-Force
Bad Web Bot
🇩🇪
webanyone
2026-08-11 18:17:03
(1 week ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
🇫🇮
albionfreemarket.com
2026-08-11 18:09:45
(1 week ago)
34.53.54.51 - - [11/Aug/2026:18:09:43 +0000] "GET /database.sql HTTP/1.1" 403 153 "-" "Mozilla/5.0 A ...
show more
34.53.54.51 - - [11/Aug/2026:18:09:43 +0000] "GET /database.sql HTTP/1.1" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 0.000 "-" "-"
34.53.54.51 - - [11/Aug/2026:18:09:43 +0000] "GET /db.sql HTTP/1.1" 403 153 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 0.000 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
webanyone
2026-08-11 18:01:16
(1 week ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
netclix.gr
2026-08-11 17:50:39
(1 week ago)
(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 34.53.54.51 (US/United States/51.54.53.34 ...
show more
(c5_sensitive_scan) Custom5 Sensitive File Exploit Blocked 34.53.54.51 (US/United States/51.54.53.34.bc.googleusercontent.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: default:80 34.53.54.51 - - [11/Aug/2026:20:50:36 +0300] "GET /actuator/env HTTP/1.1" 404 402 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
Port Scan
🇩🇪
loveprod
2026-08-11 17:28:16
(1 week ago)
34.53.54.51 - - [11/Aug/2026:20:28:15 +0300] "GET /static../.env HTTP/1.1" 301 579 "-" "Mozilla/5.0 ...
show more
34.53.54.51 - - [11/Aug/2026:20:28:15 +0300] "GET /static../.env HTTP/1.1" 301 579 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
34.53.54.51 - - [11/Aug/2026:20:28:15 +0300] "GET /app/.env HTTP/1.1" 301 569 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
...
show less
Bad Web Bot
🇩🇪
big-cloud.nl
2026-08-11 17:15:45
(1 week ago)
Try to access /static../.env
Web App Attack
2026-08-11 17:04:13
(1 week ago)
PSCSERV WPSCAN 34.53.54.51
Bad Web Bot
Web App Attack