🇳🇱
homeshowdomain.nl
2026-08-27 21:59:47
(21 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26.
show less
Web App Attack
SSH
Hacking
🇮🇳
evicky2002
2026-08-27 06:00:33
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇨🇭
🇨🇭 Hosting
2026-08-27 05:10:15
(1 day ago)
Automated WAF report: 200-300 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-08-26 18:57:41
(2 days ago)
34.7.12.246 - - [26/Aug/2026:19:57:51 +0100] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1 ...
show more
34.7.12.246 - - [26/Aug/2026:19:57:51 +0100] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 6446 "https://trailrides.wales/@fs/home/ec2-user/.aws/credentials?raw??" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.5388.34 Mobile Safari/537.36; compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-26 18:04:09
(2 days ago)
(mod_security) mod_security (id:949110) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:949110) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 14:04:04.343094 2026] [security2:error] [pid 28381:tid 28381] [client 34.7.12.246:10018] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "i-dataph.com"] [uri "/files../etc/passwd"] [unique_id "ao8qlOAhpNXv1lAOKK-cagAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇿
Antinson
2026-08-26 17:10:05
(2 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
TPI-Abuse
2026-08-26 16:46:08
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:46:02.063137 2026] [security2:error] [pid 20626:tid 20626] [client 34.7.12.246:30536] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sscsco.com"] [uri "/static../.env"] [unique_id "ao8YSsO7SzavZHLCDqIjRgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-08-26 16:11:12
(2 days ago)
Bot / seems abusive / Apache connections: 158
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 16:11:11
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 12:11:05.477133 2026] [security2:error] [pid 549529:tid 549540] [client 34.7.12.246:41290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "runawaydixie.com"] [uri "/media../.env"] [unique_id "ao8QGaKHc8vyIo5hQ63x_wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
akasolutions.de
2026-08-26 15:02:45
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.7.12.246 (246.12.7.34.bc.googleuserc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.7.12.246 (246.12.7.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
Hazzard
2026-08-26 14:52:04
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted]): (CF_ENABLE)
Bad Web Bot
🇩🇪
mygcode.de
2026-08-26 13:43:43
(2 days ago)
Scanning for Exploits
Bad Web Bot
🇭🇳
unph
2026-08-26 10:39:00
(2 days ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force
🇺🇸
TPI-Abuse
2026-08-26 10:11:13
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.7.12.246 (246.12.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 06:11:09.713386 2026] [security2:error] [pid 20561:tid 20561] [client 34.7.12.246:22732] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rucomp.com"] [uri "/.env"] [unique_id "ao67vTCLcYgIVUv2KvISfQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-08-26 09:58:29
(2 days ago)
Excessive multi-domain requests
Brute-Force