2026-09-02 16:06:40
(16 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇨🇭
🇨🇭 Hosting
2026-09-02 05:10:27
(1 day ago)
Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-09-01 13:26:25
(1 day ago)
34.64.100.7 - - [01/Sep/2026:16:26:22 +0300] "GET /phpinfo.php HTTP/2.0" 200 33735 "-" "Mozilla/5.0 ...
show more
34.64.100.7 - - [01/Sep/2026:16:26:22 +0300] "GET /phpinfo.php HTTP/2.0" 200 33735 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.64.100.7 - - [01/Sep/2026:16:26:25 +0300] "GET /info.php HTTP/2.0" 200 33732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇩🇪
LRob
2026-09-01 12:49:30
(1 day ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-09-01 12:49 UTC
show less
Hacking
Web App Attack
🇳🇱
e.fierstra
2026-09-01 10:34:57
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-01 10:30:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇬🇧
AvonleaConsulting
2026-09-01 08:56:10
(1 day ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇩🇪
langenkamp-media
2026-09-01 05:19:51
(2 days ago)
Fail2Ban: Banned from jail nginx-nohome on 3dausdu.de
Web App Attack
🇬🇧
openstrike.co.uk
2026-09-01 05:13:47
(2 days ago)
251 attacks on VC URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs:
GET /.git/config ...
show more
251 attacks on VC URLs, PHP URLs, config grabbing URLs (type 2), env grabbing URLs:
GET /.git/config HTTP/1.1
GET /includes/phpinfo.php HTTP/1.1
GET /application_default_credentials.json HTTP/1.1
GET /config/app/.env HTTP/1.1
show less
Hacking
Web App Attack
🇩🇪
zumbo.net
2026-09-01 02:03:45
(2 days ago)
[Tue Sep 01 05:03:44.154226 2026] [proxy_fcgi:error] [pid 237311:tid 237360] [client 34.64.100.7:0] ...
show more
[Tue Sep 01 05:03:44.154226 2026] [proxy_fcgi:error] [pid 237311:tid 237360] [client 34.64.100.7:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 05:03:44.390034 2026] [proxy_fcgi:error] [pid 237312:tid 237349] [client 34.64.100.7:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 05:03:44.625393 2026] [proxy_fcgi:error] [pid 237312:tid 237317] [client 34.64.100.7:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 05:03:44.861089 2026] [proxy_fcgi:error] [pid 237311:tid 237321] [client 34.64.100.7:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 05:03:45.094988 2026] [proxy_fcgi:error] [pid 237312:tid 237369] [client 34.64.100.7:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 17:10:00
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.100.7 (7.100.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.100.7 (7.100.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 13:09:55.157053 2026] [security2:error] [pid 7038:tid 7038] [client 34.64.100.7:32902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "relayer.net"] [uri "/.git/config"] [unique_id "apW1Y1UPvWw4nznoQeDciwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
themrdogs
2026-08-31 16:46:33
(2 days ago)
$f2bV_matches
Brute-Force
Web App Attack
🇳🇱
ConsulHosting
2026-08-31 16:27:31
(2 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 15:36:33
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.64.100.7 (7.100.64.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.100.7 (7.100.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 11:36:25.598420 2026] [security2:error] [pid 17041:tid 17041] [client 34.64.100.7:48296] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "relationshipecology.com"] [uri "/.git/config"] [unique_id "apWfecskfxtYlM1axpNz4wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-08-31 14:26:01
(2 days ago)
Too many 404 requests [BY]
Web App Attack