🇳🇱
homeshowdomain.nl
2026-10-13 21:59:40
(2 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-12.
Web App Attack
SSH
Hacking
🇸🇪
Per-Erik Runebert
2026-10-13 08:39:22
(2 weeks ago)
Malicious vulnerability hacking attacks and excessive requests: 443
Hacking
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-10-13 05:10:45
(2 weeks ago)
Automated WAF report: 175-200 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-10-12 18:13:05
(2 weeks ago)
GET /config/database.json (Tarpitted for 42m27s, wasted 149.3kB)
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-12 17:30:16
(2 weeks ago)
2026/10/12 18:30:14 [error] 4060693#4060693: *2564675 access forbidden by rule, client: 34.7.2.109, server: api.betatechnologies.info, request: "GET /api%2F.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/12 18:30:14 [error] 4060693#4060693: ...
show more
2026/10/12 18:30:14 [error] 4060693#4060693: *2564675 access forbidden by rule, client: 34.7.2.109, server: api.betatechnologies.info, request: "GET /api%2F.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/12 18:30:14 [error] 4060693#4060693: *2564675 access forbidden by rule, client: 34.7.2.109, server: api.betatechnologies.info, request: "GET /static../.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/12 18:30:14 [error] 4060693#4060693: *2564675 access forbidden by rule, client: 34.7.2.109, server: api.betatechnologies.info, request: "GET /settings%2F.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-10-12 16:44:52
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-10-12 16:19:14
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-10-12 15:57:03
(2 weeks ago)
Bot / scanning and/or hacking attempts: POST /api/designer/v1/file-content HTTP/2.0, POST /form/ HTTP/2.0, POST /api/v1/build_public_tmp/00000000-0000-0000-0000-000000000, POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_
Hacking
Web App Attack
🇬🇧
venus.launch.bz
2026-10-12 15:38:29
(2 weeks ago)
(wpscan) WordPress probe detected from 34.7.2.109 (109.2.7.34.bc.googleusercontent.com)
Hacking
🇳🇱
Alt255
2026-10-12 15:26:33
(2 weeks ago)
[cb-13al] Excessive 404 errors (web scanning): 75 suspicious requests detected by fail2ban jail apache-404. Example: 34.7.2.109 - - [12/Oct/2026:17:26:28 +0200] "GET /.env.example HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +htt ...
show more
[cb-13al] Excessive 404 errors (web scanning): 75 suspicious requests detected by fail2ban jail apache-404. Example: 34.7.2.109 - - [12/Oct/2026:17:26:28 +0200] "GET /.env.example HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.7.2.109 - - [12/Oct/2026:17:26:28 +0200] "GET /js../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.7.2.109 - - [12/Oct/2026:17:26:28 +0200] "GET /.env.local HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.7.2.109 - - [12/Oct/2026:17:26:28 +0200] "GET /.git-credentials HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
0
...
show less
Bad Web Bot
Web App Attack
🇧🇾
lns.bz
2026-10-12 15:26:06
(2 weeks ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-12 15:12:16
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.7.2.109 (109.2.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:12:12.263220 2026] [security2:error] [pid 19063:tid 19063] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.2.109 (109.2.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:12:12.263220 2026] [security2:error] [pid 19063:tid 19063] [client 34.7.2.109:37952] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||zeta-me.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "zeta-me.com"] [uri "/z9x8c7v6b5-debug-trigger-zeta-me.com"] [unique_id "asz4zCdKfchw111VitsZ0QAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
JustMeHere
2026-10-12 15:02:59
(2 weeks ago)
[Mon Oct 12 11:02:54.880784 2026] [security2:error] [pid 79977:tid 80081] [client 34.7.2.109:51266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activa ...
show more
[Mon Oct 12 11:02:54.880784 2026] [security2:error] [pid 79977:tid 80081] [client 34.7.2.109:51266] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.15.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "yorknation.com"] [uri "/"] [unique_id "asz2njvP-mmN1tOdeWVRLgAAAEQ"]
...
show less
Web App Attack
🇳🇱
Alt255
2026-10-12 14:32:29
(2 weeks ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.7.2.109 - - \[12/Oct/2026:16:32:24 +0200\] "GET /.htpasswd HTTP/1.1" 301 511 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Pe ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.7.2.109 - - \[12/Oct/2026:16:32:24 +0200\] "GET /.htpasswd HTTP/1.1" 301 511 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; PerplexityBot/1.0\; +https://perplexity.ai/perplexitybot\)"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-10-12 14:27:02
(2 weeks ago)
34.7.2.109 - - [12/Oct/2026:15:27:01 +0100] "GET /xfn30cgqmqpzxazu7byk HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot ...
show more
34.7.2.109 - - [12/Oct/2026:15:27:01 +0100] "GET /xfn30cgqmqpzxazu7byk HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
