🇨🇦
dpinse
2026-05-19 00:41:14
UTC ·
(5 months ago)
This IP was detected by CrowdSec triggering firewallservices/pf-scan-multi_ports
Web App Attack
Port Scan
🇫🇷
polido
2026-05-19 00:05:03
UTC ·
(5 months ago)
Unauthorized connection attempt to port 443 from 34.178.60.166
Port Scan
🇫🇷
Altai
2026-05-18 23:32:23
UTC ·
(5 months ago)
Blocked by UFW on Jellyfin [8443/tcp]
Source port: 47135
TTL: 251
Packet length: 44
TOS: 0x08
This report was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
Port Scan
🇬🇧
consul.to
2026-05-15 03:23:03
UTC ·
(5 months ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-05-15 01:28:07
UTC ·
(5 months ago)
(PERMBLOCK) 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
Anonymous
2026-05-14 16:31:53
UTC ·
(5 months ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-05-14 14:55:17
UTC ·
(5 months ago)
(mod_security) mod_security (id:210730) triggered by 34.178.60.166 (166.60.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:55:13.220540 2026] [security2:error] [pid 29635:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.178.60.166 (166.60.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:55:13.220540 2026] [security2:error] [pid 29635:tid 29635] [client 34.178.60.166:42958] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||cnwire.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "cnwire.com"] [uri "/api.sql"] [unique_id "agXiUSSM-4fv0gL-n740_gAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Matthew Ping
2026-05-14 14:45:02
UTC ·
(5 months ago)
ModSecurity rule 949110 triggered on dedicated4785. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
Anonymous
2026-05-14 13:27:40
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13 ...
show more
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13:27:35 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13:27:35 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13:27:36 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13:27:37 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:13:27:38 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
Port Scan
🇬🇧
Aetherweb Ark
2026-05-14 11:41:34
UTC ·
(5 months ago)
(mod_security) mod_security (id:949110) triggered by 34.178.60.166 (NL/Netherlands/166.60.178.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇳🇱
Site.eu
2026-05-14 11:31:12
UTC ·
(5 months ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-05-14 11:17:17
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11 ...
show more
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11:17:09 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11:17:10 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11:17:11 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11:17:11 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:11:17:12 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-14 07:15:12
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07 ...
show more
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07:15:08 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07:15:08 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07:15:09 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07:15:09 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:07:15:10 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
Port Scan
Anonymous
2026-05-14 03:28:03
UTC ·
(5 months ago)
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03 ...
show more
(caddyscan) Scanner path probe from 34.178.60.166 (NL/The Netherlands/166.60.178.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03:28:00 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03:28:01 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03:28:01 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03:28:02 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.178.60.166 - - [14/May/2026:03:28:02 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
Port Scan
🇩🇪
ghostwarriors
2026-05-14 01:50:05
UTC ·
(5 months ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack