🇩🇪
Bedios GmbH
2026-09-29 15:15:23
UTC ·
(1 month ago)
Login credentials theft attempt
Hacking
🇬🇧
consul.to
2026-09-29 08:45:10
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-09-29 08:20:25
UTC ·
(1 month ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.64.223.83 - - \[29/Sep/2026:10:20:13 +0200\] "GET /.git/config HTTP/1.1" 301 695 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, l ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.64.223.83 - - \[29/Sep/2026:10:20:13 +0200\] "GET /.git/config HTTP/1.1" 301 695 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 21:18:31
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:18:27.378022 2026] [security2:error] [pid 31812:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 17:18:27.378022 2026] [security2:error] [pid 31812:tid 31812] [client 34.64.223.83:32820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "limobusrichmond.com"] [uri "/.git/config"] [unique_id "arrZo6FVFD-e6uQZy9xfzAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 18:04:27
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:04:20.875672 2026] [security2:error] [pid 26645:tid 26 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 14:04:20.875672 2026] [security2:error] [pid 26645:tid 26645] [client 34.64.223.83:54808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "icwcruisersguide.bahamascruisersguide.com"] [uri "/.git/config"] [unique_id "arqsJLJ-99hpkg_YtclIXAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 06:40:45
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:40:41.977253 2026] [security2:error] [pid 14529:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.223.83 (83.223.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 02:40:41.977253 2026] [security2:error] [pid 14529:tid 14557] [client 34.64.223.83:39628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kellenlee.mailme.name"] [uri "/.git/config"] [unique_id "aroL6XnO5CeyfbnxZVGmogAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-27 15:40:48
UTC ·
(1 month ago)
[SunSep2717:40:42.8113792026][security2:error][pid3829341:tid3829412][client34.64.223.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacce ...
show more
[SunSep2717:40:42.8113792026][security2:error][pid3829341:tid3829412][client34.64.223.83:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"www.morgenstern-swiss.ch.136-243-54-122.cpanel.site\"][uri\"/.env.bak\"][unique_id\"ark4-vRslPMJqJjSDmEGjwAAAIc\"]
show less
Port Scan
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-09-27 12:30:22
UTC ·
(1 month ago)
34.64.223.83 - - [27/Sep/2026:12:30:13 +0000] "GET /.env HTTP/1.1" 403 27896 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.64.223.83"
34.64.223.83 - - [27/Sep/2026:12:30:14 +0 ...
show more
34.64.223.83 - - [27/Sep/2026:12:30:13 +0000] "GET /.env HTTP/1.1" 403 27896 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.64.223.83"
34.64.223.83 - - [27/Sep/2026:12:30:14 +0000] "GET /.env.local HTTP/1.1" 403 27934 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.64.223.83"
34.64.223.83 - - [27/Sep/2026:12:30:15 +0000] "GET /.env.production HTTP/1.1" 403 27893 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.64.223.83"
34.64.223.83 - - [27/Sep/2026:12:30:16 +0000] "GET /.env.staging HTTP/1.1" 403 27894 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.64.223.83"
34.64.223.83 - - [27/Sep/2026:12:30:17 +0000] "GET /.env.development HTTP/1.1" 403 27893 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/5
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-09-27 09:10:06
UTC ·
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-27 06:37:13
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
mnsf
2026-09-25 23:05:11
UTC ·
(1 month ago)
Abuse Detected (9)
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-23 16:38:57
UTC ·
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-23 16:37:37
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
ger-stg-sifi1
2026-09-23 16:28:44
UTC ·
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-22 22:06:16
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-21.
Web App Attack
SSH
Hacking