🇬🇧
foxxelabs
2026-07-24 09:08:58
(3 days ago)
Automated report from FoxxeLabs Sentinel. Path probed: /server-status | Project: anseo | Reason(s): ...
show more
Automated report from FoxxeLabs Sentinel. Path probed: /server-status | Project: anseo | Reason(s): AbuseIPDB score: 100/100 | User-Agent: Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)
show less
Web App Attack
🇸🇪
nekopavel
2026-07-24 07:30:55
(3 days ago)
34.85.216.224 - - [24/Jul/2026:09:30:53 +0200]"GET /.git/config HTTP/2.0" 444 0"-" login.neko.chat " ...
show more
34.85.216.224 - - [24/Jul/2026:09:30:53 +0200]"GET /.git/config HTTP/2.0" 444 0"-" login.neko.chat "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot""0.000" "-""Washington" "US"
34.85.216.224 - - [24/Jul/2026:09:30:53 +0200]"GET /.gitlab-ci.yml HTTP/2.0" 404 19"-" login.neko.chat "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] ""0.006" "0.004""Washington" "US"
34.85.216.224 - - [24/Jul/2026:09:30:53 +0200]"GET /.aws/credentials HTTP/2.0" 404 19"-" login.neko.chat "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)""0.006" "0.004""Washington" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
technojoe99
2026-07-24 07:05:25
(3 days ago)
Exploit scan from 34.85.216.224. GET /wp-json HTTP/2.0.
Web App Attack
🇩🇪
voemedia
2026-07-24 06:51:07
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.85.216.224 (US/United States/224.216 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.85.216.224 (US/United States/224.216.85.34.bc.googleusercontent.com)
show less
SQL Injection
🇫🇷
EDSL
2026-07-24 06:07:11
(3 days ago)
[mail.edsl.fr] Blocked by SysWarden Firewall (Web Attack)
Web App Attack
Hacking
Port Scan
🇩🇪
Hazzard
2026-07-24 04:17:11
(3 days ago)
(PERMBLOCK) 34.85.216.224 (US/United States/District of Columbia/Washington/224.216.85.34.bc.googleu ...
show more
(PERMBLOCK) 34.85.216.224 (US/United States/District of Columbia/Washington/224.216.85.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
🇩🇪
www.mammazone.it
2026-07-24 03:38:14
(3 days ago)
[Fri Jul 24 05:38:12.753019 2026] [access_compat:error] [pid 1888634] [client 34.85.216.224:60068] A ...
show more
[Fri Jul 24 05:38:12.753019 2026] [access_compat:error] [pid 1888634] [client 34.85.216.224:60068] AH01797: client denied by server configuration: /var/www/mammazone.it/rclone.conf
[Fri Jul 24 05:38:13.792301 2026] [access_compat:error] [pid 1888584] [client 34.85.216.224:60104] AH01797: client denied by server configuration: /var/www/mammazone.it/.htpasswd
...
show less
Hacking
🇳🇱
ConsulHosting
2026-07-24 03:37:20
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇮
YF
2026-07-24 03:30:34
(3 days ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
🇩🇪
FeG Deutschland
2026-07-24 03:08:28
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇪🇸
loadsoporte
2026-07-24 02:30:13
(3 days ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
Hazzard
2026-07-24 02:08:33
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇵🇱
wHosts
2026-07-24 02:04:08
(3 days ago)
Blocked by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 02:00:26
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.85.216.224 (224.216.85.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.85.216.224 (224.216.85.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jul 23 22:00:22.528466 2026] [security2:error] [pid 243938:tid 243953] [client 34.85.216.224:56092] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||manage.aafm.us|F|2"] [data ".conf"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "manage.aafm.us"] [uri "/rclone.conf"] [unique_id "amLHNsr9ysl53MslF0qMLQAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-07-23 21:39:39
(3 days ago)
34.85.216.224 - - [23/Jul/2026:23:39:38 +0200] "GET /.git/config HTTP/2.0" 200 3069 "-" "Mozilla/5.0 ...
show more
34.85.216.224 - - [23/Jul/2026:23:39:38 +0200] "GET /.git/config HTTP/2.0" 200 3069 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Brute-Force
Web App Attack