🇫🇷
SpaceHost-Server
2026-11-11 23:18:47
UTC ·
(19 hours ago)
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-10 23:18:42
UTC ·
(1 day ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-10 23:00:35
UTC ·
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-09.
Web App Attack
SSH
Hacking
2026-11-10 13:05:23
UTC ·
(2 days ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-10 12:47:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.102.79.61 (61.79.102.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:47:43.151035 2026] [security2:error] [pid 14376:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.102.79.61 (61.79.102.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 10 07:47:43.151035 2026] [security2:error] [pid 14376:tid 14376] [client 34.102.79.61:52850] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "therealseska.com"] [uri "/.env"] [unique_id "avMSbywVaja_E4kw7JaGBQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-11-10 12:40:03
UTC ·
(2 days ago)
Web App Attack
🇧🇾
lns.bz
2026-11-10 11:22:27
UTC ·
(2 days ago)
Too many 404 requests [BY]
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 10:01:27
UTC ·
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
2026-11-10 09:05:14
UTC ·
(2 days ago)
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /vite.config.js HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] " ...
show more
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /vite.config.js HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /commons.js.map HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /_next/static/chunks/pages/_app.js HTTP/1.1" 404 567 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /bundle.js.map HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.102.79.61 - - [10/Nov/2026:11:05:13 +0200] "GET /vendor.js.map HTTP/1.1" 404 185 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
2026-11-10 03:15:12
UTC ·
(2 days ago)
Bot / seems abusive / Apache connections: 51
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-10 03:13:09
UTC ·
(2 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.102.79.61 (US/United States/61.79.102.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.102.79.61 - - [10/Nov/2026:04: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.102.79.61 (US/United States/61.79.102.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.102.79.61 - - [10/Nov/2026:04:13:08 +0100] "GET /secrets.json HTTP/2.0" 404 201 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "34.102.79.61" host=digiampaolo.it
show less
Port Scan
🇧🇪
voormedia
2026-11-10 03:07:42
UTC ·
(2 days ago)
Accessed trap at '/.env'
Web App Attack
🇵🇱
sefinek.net
2026-11-10 03:02:59
UTC ·
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇩🇪
macrob
2026-11-10 02:41:50
UTC ·
(2 days ago)
2026/11/10 02:41:43 [error] 1367338#1367338: *21997759 access forbidden by rule, client: 34.102.79.61, server: finami.mx, request: "GET /.git/HEAD HTTP/2.0", host: "finami.mx"
2026/11/10 02:41:46 [error] 1367339#1367339: *22005371 access forbidden by ...
show more
2026/11/10 02:41:43 [error] 1367338#1367338: *21997759 access forbidden by rule, client: 34.102.79.61, server: finami.mx, request: "GET /.git/HEAD HTTP/2.0", host: "finami.mx"
2026/11/10 02:41:46 [error] 1367339#1367339: *22005371 access forbidden by rule, client: 34.102.79.61, server: finami.mx, request: "GET /.vite/manifest.json HTTP/2.0", host: "finami.mx"
2026/11/10 02:41:49 [error] 1367338#1367338: *22014212 access forbidden by rule, client: 34.102.79.61, server: finami.mx, request: "GET /.bfrt-1794278507588196200-404 HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇳🇱
ipoac.nl
2026-11-10 02:09:10
UTC ·
(2 days ago)
ipoac.nl:443 34.102.79.61 - - [10/Nov/2026:03:09:09 +0100] ipoac.nl "GET /.git/HEAD HTTP/1.1" 404 7430 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Bad Web Bot
