๐ซ๐ท
LiloBzH
2026-09-30 18:52:36
(4 days ago)
34.11.78.189 - - [30/Sep/2026:20:52:34 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 A ...
show more
34.11.78.189 - - [30/Sep/2026:20:52:34 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
show less
Web App Attack
๐ซ๐ท
LiloBzH
2026-09-30 14:44:05
(4 days ago)
34.11.78.189 - - [30/Sep/2026:16:44:04 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 ( ...
show more
34.11.78.189 - - [30/Sep/2026:16:44:04 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-30 14:03:18
(4 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
Blexyel
2026-09-30 13:55:47
(4 days ago)
34.11.78.189 - - [30/Sep/2026:15:55:46 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 Ap ...
show more
34.11.78.189 - - [30/Sep/2026:15:55:46 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-09-30 13:40:03
(4 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-30 13:25:10
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.11.78.189 (189.78.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.78.189 (189.78.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:25:00.737340 2026] [security2:error] [pid 14593:tid 14593] [client 34.11.78.189:57614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.wiro.am"] [uri "/.htpasswd"] [unique_id "ar0NrLLlarUIAp3bs5Ug5wAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
LiloBzH
2026-09-30 11:49:18
(4 days ago)
34.11.78.189 - - [30/Sep/2026:13:49:12 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "CCBot/2.0 (ht ...
show more
34.11.78.189 - - [30/Sep/2026:13:49:12 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.11.78.189 - - [30/Sep/2026:13:49:16 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 200 920 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
Web App Attack
Anonymous
2026-09-30 11:00:46
(4 days ago)
34.11.78.189 - - [30/Sep/2026:13:00:46 +0200] "GET /_nuxt/../.env HTTP/1.1" 404 11792 "-" "Mozilla/5 ...
show more
34.11.78.189 - - [30/Sep/2026:13:00:46 +0200] "GET /_nuxt/../.env HTTP/1.1" 404 11792 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-30 10:51:16
(4 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ฎ
KTSTechnology
2026-09-30 10:41:12
(4 days ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
๐ฆ๐บ
aranguren.org
2026-09-30 10:24:54
(4 days ago)
34.11.78.189 - - [30/Sep/2026:20:24:53 +1000] "GET /..%2f.env HTTP/2.0" 404 983 "-" "Mozilla/5.0 App ...
show more
34.11.78.189 - - [30/Sep/2026:20:24:53 +1000] "GET /..%2f.env HTTP/2.0" 404 983 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.11.78.189 - - [30/Sep/2026:20:24:53 +1000] "GET /%2e%2e/.env HTTP/2.0" 400 916 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.11.78.189 - - [30/Sep/2026:20:24:53 +1000] "GET /..%2f..%2f.env HTTP/2.0" 404 983 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.11.78.189 - - [30/Sep/2026:20:24:54 +1000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 916 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.11.78.189 - - [30/Sep/2026:20:24:54 +1000] "GET /admin%2F.env HTTP/2.0" 404 983 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.11.78.189 - - [30/Sep/2026:20:24:54 +1000] "GET /dashboard%2F.env HTTP/2.0" 404 983 "-" "Mozilla/5.0 (compatible;
...
show less
Bad Web Bot
๐ฉ๐ช
Blexyel
2026-09-30 10:16:53
(4 days ago)
34.11.78.189 - - [30/Sep/2026:12:16:52 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 A ...
show more
34.11.78.189 - - [30/Sep/2026:12:16:52 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-30 10:06:24
(4 days ago)
Trying to access config files
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-30 10:00:02
(4 days ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
๐ฉ๐ช
dpsbs
2026-09-30 09:57:33
(4 days ago)
multiple ips intrustions detected
Hacking