🇫🇷
Zundapper
2026-09-16 11:01:17
(2 days ago)
34.88.223.145 - - [16/Sep/2026:13:01:12 +0200] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 ...
show more
34.88.223.145 - - [16/Sep/2026:13:01:12 +0200] "GET /config/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.223.145 - - [16/Sep/2026:13:01:14 +0200] "GET /vendor/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.223.145 - - [16/Sep/2026:13:01:15 +0200] "GET /temp/.env HTTP/1.1" 404 548 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.223.145 - - [16/Sep/2026:13:01:17 +0200] "GET /phpinfo.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.223.145 - - [16/Sep/2026:13:01:17 +0200] "GET /info.php HTTP/1.1" 404 27 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chro
...
show less
Web App Attack
Port Scan
🇩🇪
wpadm4
2026-09-16 08:17:21
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇲🇾
Rizzy
2026-09-16 06:25:11
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 05:47:19
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 01:47:11.999576 2026] [security2:error] [pid 1768:tid 1804] [client 34.88.223.145:56486] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.agriclean.net"] [uri "/.git/config"] [unique_id "aqotXxbarLT38UXIjtABvQAAAYU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-09-16 05:20:49
(3 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
TPI-Abuse
2026-09-15 20:41:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 16:41:48.538717 2026] [security2:error] [pid 12524:tid 12538] [client 34.88.223.145:32990] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.advometric.com"] [uri "/.git/config"] [unique_id "aqmtjLlj8sLycv4Ch6FzzwAAAIk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-15 19:36:57
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 18:31:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:31:42.223579 2026] [security2:error] [pid 6092:tid 6092] [client 34.88.223.145:40194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessmay.com"] [uri "/.git/config"] [unique_id "aqmPDsRLPZ23h5wduxCvkQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:16:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:16:43.926174 2026] [security2:error] [pid 24778:tid 24778] [client 34.88.223.145:35804] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessie-wu.com"] [uri "/.git/config"] [unique_id "aql9e94QOtCvImso8rdIUQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Klaverstyn
2026-09-15 15:49:41
(3 days ago)
Cross-vhost secrets/RCE probing campaign
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 13:52:48
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.223.145 (145.223.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 09:52:44.397839 2026] [security2:error] [pid 26426:tid 26426] [client 34.88.223.145:52586] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jessiedavison.com"] [uri "/.git/config"] [unique_id "aqlNrJI8kSotKj4J_ncVNgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-09-15 09:40:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-09-15 03:49:59
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking