🇺🇸
mnsf
2026-06-16 00:08:46
(2 days ago)
Scanning/Probing (61)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-15 22:04:41
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-14.
show less
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-06-15 15:06:05
(2 days ago)
20 attempts against mh_ha-misbehave-ban on takeover-test
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
grassau.com
2026-06-15 14:52:56
(2 days ago)
*Port Scan* detected from 34.83.205.250 (US/United States/Oregon/The Dalles/250.205.83.34.bc.googleu ...
show more
*Port Scan* detected from 34.83.205.250 (US/United States/Oregon/The Dalles/250.205.83.34.bc.googleusercontent.com).
show less
Port Scan
🇨🇭
ca
2026-06-15 12:11:38
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-06-15 10:08:52
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 06:08:45.952996 2026] [security2:error] [pid 16047:tid 16047] [client 34.83.205.250:58044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "keepaustinnuts.com"] [uri "/.env.testing"] [unique_id "ai_PLdBQ7tzLNiW-q_n21wAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 06:27:56
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 02:27:51.506443 2026] [security2:error] [pid 29573:tid 29589] [client 34.83.205.250:48284] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "isoceansl.com"] [uri "/.env.example"] [unique_id "ai-bZ48LtFFcnNqbTWCDSwAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-06-15 05:10:23
(2 days ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
2026-06-15 05:02:09
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 05:01:57
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 01:01:51.581073 2026] [security2:error] [pid 14368:tid 14368] [client 34.83.205.250:44288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.galaxymarble.quest.38floorsupply.com"] [uri "/.env.dist"] [unique_id "ai-HP9HemmJyGQzFWdY3xAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-14 20:01:30
(3 days ago)
Multiple WAF Violations
Web App Attack
2026-06-14 16:39:28
(3 days ago)
Blocked by ModSec and CSF
Port Scan
🇩🇪
big-cloud.nl
2026-06-14 11:17:59
(3 days ago)
Try to access /.env
Web App Attack
🇨🇭
Origon
2026-06-14 05:54:56
(3 days ago)
http-sensitive-files - IP: 34.83.205.250 - time="2026-06-14T07:54:55+02:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 34.83.205.250 - time="2026-06-14T07:54:55+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.83.205.250 (US/396982) : 4h ban on Ip 34.83.205.250" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 05:24:17
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.83.205.250 (250.205.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 01:24:11.989639 2026] [security2:error] [pid 22022:tid 22022] [client 34.83.205.250:57764] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.naturalpozzolanassociation.pozzolan.org"] [uri "/.env.production"] [unique_id "ai46-_Z7EN9QUZRfNZ1LKAAAAF8"]
show less
Brute-Force
Bad Web Bot
Web App Attack