๐บ๐ธ
Carltonfsck
2026-10-02 06:01:08
(3 weeks ago)
34.80.51.49 - - [02/Oct/2026:06:01:07 +0000] "GET /model/info HTTP/1.1" 404 49
34.80.51.49 - - [02/O ...
show more
34.80.51.49 - - [02/Oct/2026:06:01:07 +0000] "GET /model/info HTTP/1.1" 404 49
34.80.51.49 - - [02/Oct/2026:06:01:07 +0000] "GET /z9x8c7v6b5-debug-trigger-www.maa-net.net HTTP/1.1" 404 49
34.80.51.49 - - [02/Oct/2026:06:01:07 +0000] "GET /p0f7o0c7bob4seubobno HTTP/1.1" 404 49
...
show less
Hacking
Web App Attack
๐ต๐ฑ
lns.bz
2026-10-02 04:50:22
(3 weeks ago)
Web app attack [PL.Lu]
Exploited Host
Web App Attack
๐ฉ๐ช
tentwentyfour
2026-10-02 02:40:38
(3 weeks ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
๐บ๐ธ
dot.mg
2026-10-02 02:28:02
(3 weeks ago)
Scan of vulnerable files
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 01:42:48
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 21:42:39.882132 2026] [security2:error] [pid 22317:tid 22360] [client 34.80.51.49:48670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ceol.us"] [uri "/.env.js"] [unique_id "ar8MD3KG_RmeIIqenPTD1QAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
lolyay
2026-10-02 00:40:15
(3 weeks ago)
34.80.51.49 - - [02/Oct/2026:00:40:14 +0000] "GET /build../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (co ...
show more
34.80.51.49 - - [02/Oct/2026:00:40:14 +0000] "GET /build../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.80.51.49 - - [02/Oct/2026:00:40:14 +0000] "GET /media../.env HTTP/1.1" 200 4 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
Bad Web Bot
๐ง๐ช
cmbplf
2026-10-01 23:04:08
(3 weeks ago)
3.348 requests from abuseipdb.com blacklisted IP (1yr5mos5d)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
ConsulHosting
2026-10-01 21:24:22
(3 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
Anonymous
2026-10-01 20:47:42
(3 weeks ago)
Portscan: TCP/8080 (3x), TCP/8443 (3x)
Port Scan
๐ฒ๐พ
Rizzy
2026-10-01 20:09:10
(3 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-01 17:49:55
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:49:49.748181 2026] [security2:error] [pid 2526:tid 2526] [client 34.80.51.49:43768] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.madwave.chevronparkett.com|F|2"] [data ".madwave.chevronparkett.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.madwave.chevronparkett.com"] [uri "/z9x8c7v6b5-debug-trigger-www.madwave.chevronparkett.com"] [unique_id "ar6dPYAcX5oOXtkSX_rzoAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-10-01 17:36:25
(3 weeks ago)
AutoBlock: ๐ก Port Scan (Non Decay-Based) - โ Excessive 40X Errors (Decay-Based)
Port Scan
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-01 17:15:04
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.51.49 (49.51.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 13:14:56.451740 2026] [security2:error] [pid 32615:tid 32615] [client 34.80.51.49:43870] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.lumberwizard.com.wizind.com|F|2"] [data ".lumberwizard.com.wizind.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lumberwizard.com.wizind.com"] [uri "/z9x8c7v6b5-debug-trigger-www.lumberwizard.com.wizind.com"] [unique_id "ar6VEO8iHr3961qvPIN8aAAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-01 16:51:48
(3 weeks ago)
(PERMBLOCK) 34.80.51.49 (TW/Taiwan/Taipei City/Taipei/49.51.80.34.bc.googleusercontent.com/[redacted ...
show more
(PERMBLOCK) 34.80.51.49 (TW/Taiwan/Taipei City/Taipei/49.51.80.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐ซ๐ท
masterguru
2026-10-01 16:44:47
(3 weeks ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot