|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇯🇵
bokumin.org
|
|
[id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [uri "/.git/config"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"]
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:40:59.372558 2026] [security2:error] [pid 10433:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 08:40:59.372558 2026] [security2:error] [pid 10433:tid 10433] [client 34.84.14.251:34912] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bokharienterprises.stbms.com"] [uri "/.git/config"] [unique_id "arux27AG-teOCRIuuqZPCAAAACA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 04:09:21.238299 2026] [security2:error] [pid 11486:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 04:09:21.238299 2026] [security2:error] [pid 11486:tid 11486] [client 34.84.14.251:49938] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.bmpproductions.com.aktkaro.com"] [uri "/.git/config"] [unique_id "arjPMSbt2tj8pRFwTmn4HQAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇪
taivas.nl
|
|
Many_bad_calls
|
Web App Attack
|
|
🇪🇸
pipeline.es
|
|
Web scanning / probing for vulnerable paths | URL: /frontend/.env | Evidence: fui-viagens.com 34.84.14.251 - - [27/Sep/2026:02:40:22 +0200] \"GET /frontend/.env HTTP/1.1\" 404 22642 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
Web scanning / probing for vulnerable paths | URL: /frontend/.env | Evidence: fui-viagens.com 34.84.14.251 - - [27/Sep/2026:02:40:22 +0200] \"GET /frontend/.env HTTP/1.1\" 404 22642 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=JP | ASN: GOOGLE-CLOUD-PLATFORM | Country: JP
show less
|
Port Scan
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:24:15.945545 2026] [security2:error] [pid 9472:tid 948 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.14.251 (251.14.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 16:24:15.945545 2026] [security2:error] [pid 9472:tid 9482] [client 34.84.14.251:40424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.dejacats.com"] [uri "/.git/config"] [unique_id "argp7_hw9baG5qX8Eu3jRwAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
Gwyneth Llewelyn
|
|
2026/09/26 12:23:06 [error] 2462#2462: *1529 access forbidden by rule, client: 34.84.14.251, server: zonadetestes.com, request: "GET /.env HTTP/2.0", host: "acme-test.zonadetestes.com"
34.84.14.251 - - [26/Sep/2026:12:23:06 +0100] "GET /.env HTTP/2.0 ...
show more
2026/09/26 12:23:06 [error] 2462#2462: *1529 access forbidden by rule, client: 34.84.14.251, server: zonadetestes.com, request: "GET /.env HTTP/2.0", host: "acme-test.zonadetestes.com"
34.84.14.251 - - [26/Sep/2026:12:23:06 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/26 12:23:15 [error] 2462#2462: *1525 access forbidden by rule, client: 34.84.14.251, server: zonadetestes.com, request: "GET /app/.env HTTP/2.0", host: "acme-test.zonadetestes.com"
show less
|
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇧🇪
taivas.nl
|
|
Bad_requests
|
Bad Web Bot
|
|
🇩🇪
paissangroup
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇪🇸
robotstxt
|
|
34.84.14.251 - - [24/Sep/2026:02:38:50 +0000] "GET /.env HTTP/1.1" 403 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.84.14.251"
34.84.14.251 - - [24/Sep/2026:0 ...
show more
34.84.14.251 - - [24/Sep/2026:02:38:50 +0000] "GET /.env HTTP/1.1" 403 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.84.14.251"
34.84.14.251 - - [24/Sep/2026:02:38:51 +0000] "GET /.env.local HTTP/1.1" 403 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.84.14.251"
34.84.14.251 - - [24/Sep/2026:02:38:52 +0000] "GET /.env.production HTTP/1.1" 403 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.84.14.251"
34.84.14.251 - - [24/Sep/2026:02:38:53 +0000] "GET /.env.staging HTTP/1.1" 403 11768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.84.14.251"
34.84.14.251 - - [24/Sep/2026:02:38:54 +0000] "GET /.env.development HTTP/1.1" 403 11768 "-" "Mozil
...
show less
|
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|