๐ง๐ท
radardatelecom
2026-10-09 22:27:03
(3 weeks ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 22:04:54
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 18:04:48.497506 2026] [security2:error] [pid 12170:tid 12 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 18:04:48.497506 2026] [security2:error] [pid 12170:tid 12170] [client 34.74.56.105:60028] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "utilis.net"] [uri "/static../.env"] [unique_id "asllAMIFAdtxeOofDZV6GQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-09 21:56:57
(3 weeks ago)
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET /aut ...
show more
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET /auth HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET /signin HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET /app HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.74.56.105 - - [09/Oct/2026:23:56:57 +0200] "GET /d8xtx0uia1ofbtx79x87 HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.74.56.105 - - [09/Oct/2
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
NotCool
2026-10-09 21:37:05
(3 weeks ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.74.56.105 (US/United States/105.56.74.34.bc.googleusercontent.com): 50 in the last 3600 secs
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-09 21:27:24
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:27:18.520300 2026] [security2:error] [pid 5983:tid 598 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 17:27:18.520300 2026] [security2:error] [pid 5983:tid 5985] [client 34.74.56.105:52466] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ucamp.net"] [uri "/build../.env"] [unique_id "aslcNhGIKz_foqyDL7DbWQAAAUA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-10-09 21:15:01
(3 weeks ago)
2026-10-09 23:13:14 AH10244: invalid URI path (/%2e%2e/.env) && 2026-10-09 23:13:14 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ) && 2026-10-09 23:13:14 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc ...
show more
2026-10-09 23:13:14 AH10244: invalid URI path (/%2e%2e/.env) && 2026-10-09 23:13:14 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ) && 2026-10-09 23:13:14 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ) && 162 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
mnsf
2026-10-09 21:05:13
(3 weeks ago)
Scanning/Probing (16)
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-10-09 19:57:10
(3 weeks ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-09 19:33:18
(3 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
๐ง๐ช
cmbplf
2026-10-09 19:25:28
(3 weeks ago)
1.809 requests with url.path *.env
655 requests with url.path */@fs/*
302 requests with url.path */proc/*
191 requests with url.path *config.json
180 requests with url.path *credentials.json
158 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-10-09 19:20:05
(3 weeks ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-09 18:55:15
(3 weeks ago)
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /.gitlab-ci.yml HTTP/2.0" 403 298 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 325 "-" "Mozilla/5. ...
show more
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /.gitlab-ci.yml HTTP/2.0" 403 298 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0" 400 325 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /..%2f.env HTTP/2.0" 404 295 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /service-worker.js HTTP/2.0" 303 384 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /actuator/loggers HTTP/2.0" 303 382 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.74.56.105 - - [09/Oct/2026:20:55:13 +0200] "GET /appearance/../../.env HTTP/2.0" 400 325 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.74
show less
Web App Attack
Hacking
๐ฌ๐ง
consul.to
2026-10-09 18:52:00
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
maxxsense
2026-10-09 18:50:52
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.74.56.105 (US/United States/105.56.74.34.bc.googleusercontent.com)
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-10-09 18:44:56
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:44:49.617109 2026] [security2:error] [pid 8113:tid 811 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.74.56.105 (105.56.74.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 14:44:49.617109 2026] [security2:error] [pid 8113:tid 8113] [client 34.74.56.105:33136] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "the-schlosser.net"] [uri "/static../.env"] [unique_id "ask2ITlwoRW9lbXY9SeRFgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack