🇩🇪
klaus_ph
2026-09-26 19:22:30
UTC ·
(1 month ago)
2026-09-25 19:38:28,351 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.82.141.37
...
Bad Web Bot
🇩🇪
klaus_ph
2026-09-23 11:25:07
UTC ·
(1 month ago)
2026-09-22 23:39:24,527 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.82.141.37
...
Bad Web Bot
🇮🇳
evicky2002
2026-09-22 06:00:01
UTC ·
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇲🇽
octageeks.com
2026-09-22 04:17:15
UTC ·
(1 month ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
Site.eu
2026-09-22 02:59:48
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-22 01:49:35
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:49:28.384976 2026] [security2:error] [pid 23598:tid 23 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:49:28.384976 2026] [security2:error] [pid 23598:tid 23611] [client 34.82.141.37:38436] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lavonnesells.com.oldnorthwestlandco.com|F|2"] [data ".com.oldnorthwestlandco.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lavonnesells.com.oldnorthwestlandco.com"] [uri "/z9x8c7v6b5-debug-trigger-lavonnesells.com.oldnorthwestlandco.com"] [unique_id "arHeqMMfLuO2YoNEPjOlFgAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-22 01:36:19
UTC ·
(1 month ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.82.141.37 (US/United States/37.141.82.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
Hacking
🇺🇸
TPI-Abuse
2026-09-22 01:17:04
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:16:56.278080 2026] [security2:error] [pid 11144:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:16:56.278080 2026] [security2:error] [pid 11144:tid 11144] [client 34.82.141.37:60928] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.oxfordgliding.com"] [uri "/.env"] [unique_id "arHXCNWdy9z63E-HvdLtNgAAACY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-22 01:07:28
UTC ·
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 00:00:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:00:48.127328 2026] [security2:error] [pid 25071:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:00:48.127328 2026] [security2:error] [pid 25071:tid 25071] [client 34.82.141.37:45254] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lajoze.com"] [uri "/config/.env"] [unique_id "arHFMMhEJ1p5nGOsOF8qcwAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 23:25:09
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:25:02.960499 2026] [security2:error] [pid 10235:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:25:02.960499 2026] [security2:error] [pid 10235:tid 10235] [client 34.82.141.37:49958] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.modeltdr.com"] [uri "/backend/.env"] [unique_id "arG8zn1ZqC3Cyf1FHFmp9AAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
IloGus
2026-09-21 22:47:16
UTC ·
(1 month ago)
Apache web server attack detected by Fail2Ban in plesk-apache jail
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 21:57:22
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:57:14.937585 2026] [security2:error] [pid 24972:tid 24 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:57:14.937585 2026] [security2:error] [pid 24972:tid 24972] [client 34.82.141.37:52184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||digifonics.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digifonics.com"] [uri "/z9x8c7v6b5-debug-trigger-digifonics.com"] [unique_id "arGoOrJlxpWwqJfWvfeUwwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 21:41:23
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:41:16.078390 2026] [security2:error] [pid 4122:tid 412 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.82.141.37 (37.141.82.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:41:16.078390 2026] [security2:error] [pid 4122:tid 4122] [client 34.82.141.37:48500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lahamcustomwoods.com"] [uri "/.env.prod"] [unique_id "arGkfPubCD6X6p9rkR4iaQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
dtorrer
2026-09-21 21:07:49
UTC ·
(1 month ago)
General vulnerability scan.
Port Scan
