🇩🇪
ecs.ge
2026-09-16 01:27:48
(7 minutes ago)
Automatic Fail2Ban report from jail plesk-modsecurity: multiple matching events detected.
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-16 01:21:28
(14 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 21:21:23.735694 2026] [security2:error] [pid 17727:tid 17727] [client 34.60.234.229:52126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pioneercanadian.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "aqnvE-QMabiKynnEFPnMtAAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-09-16 01:17:47
(17 minutes ago)
(mod_security) mod_security (id:930120) triggered by 34.60.234.229 (US/United States/229.234.60.34.b ...
show more
(mod_security) mod_security (id:930120) triggered by 34.60.234.229 (US/United States/229.234.60.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
2026-09-16 01:15:07
(20 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 34.60.234.229 (US/United States/229.234 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.60.234.229 (US/United States/229.234.60.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
maxpower
2026-09-16 01:07:02
(28 minutes ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.60.234.229 (US/United States/229.234. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.60.234.229 (US/United States/229.234.60.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.60.234.229 - - [16/Sep/2026:03:07:00 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 404 10081 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "34.60.234.229" host=notaiopanella.it
show less
Port Scan
🇩🇪
NewWavesApp
2026-09-16 01:03:38
(32 minutes ago)
(mod_security) mod_security triggered on hostname [redacted] 34.60.234.229 (US/United States/229.234 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.60.234.229 (US/United States/229.234.60.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇳🇱
Alt255
2026-09-16 00:20:17
(1 hour ago)
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.60.234.229 - - [16/Sep/2026:02:20:06 +0200] "GET /.aws/credentials HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.60.234.229 - - [16/Sep/2026:02:20:06 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0"
34.60.234.229 - - [16/Sep/2026:02:20:06 +0200] "GET /.git/config HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.60.234.229 - - [16/Sep/2026:02:20:06 +0200] "GET /backend/.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.60.234.229 - - [16/Sep/
...
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-09-16 00:20:09
(1 hour ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.60.234.229 (US/United States/229.234. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.60.234.229 (US/United States/229.234.60.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.60.234.229 - - [16/Sep/2026:02:20:04 +0200] "GET /.aws/credentials HTTP/2.0" 200 4821 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "34.60.234.229" host=lasfiziosapizzeria.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-16 00:17:30
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:17:24.121872 2026] [security2:error] [pid 8658:tid 8658] [client 34.60.234.229:38486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kurikka.eu"] [uri "/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env"] [unique_id "aqngFO8AtTyByrDYzyJUCAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
ALSCO®️
2026-09-15 22:00:20
(3 hours ago)
Report By ALSCO Security Team: Potential CSRF Attack Detected
Web App Attack
🇺🇸
Secure Gateway®️
2026-09-15 22:00:19
(3 hours ago)
Report By Secure Gateway Security Team: Potential CSRF Attack Detected
Hacking
🇬🇧
consul.to
2026-09-15 21:13:39
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 19:44:57
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.60.234.229 (229.234.60.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:44:51.435695 2026] [security2:error] [pid 19108:tid 19108] [client 34.60.234.229:48704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ispeakmusic.com"] [uri "/.git/HEAD"] [unique_id "aqmgM3wtleLKPafUZ-5CdgAAAE0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-15 19:43:05
(5 hours ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.60.234.229 - - [15/Sep/2026:21:43:04 +0200] "GET /.aws/config HTTP/2.0" 403 395 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Séfora Srl
2026-09-15 19:32:42
(6 hours ago)
crowdsecurity/http-sensitive-files detected by CrowdSec
Web App Attack