🇬🇧
Celtic
2026-06-11 19:56:40
(1 hour ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇩🇪
grassau.com
2026-06-11 17:36:23
(3 hours ago)
*Port Scan* detected from 34.182.57.210 (US/United States/Oregon/The Dalles/210.57.182.34.bc.googleu ...
show more
*Port Scan* detected from 34.182.57.210 (US/United States/Oregon/The Dalles/210.57.182.34.bc.googleusercontent.com).
show less
Port Scan
🇳🇱
wlt-blocker
2026-06-11 14:56:52
(6 hours ago)
Unauthorized access to webpage admin
Web App Attack
2026-06-11 09:33:03
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇨🇭
🇨🇭 Hosting
2026-06-11 05:10:13
(15 hours ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇷🇺
DZBOT
2026-06-11 01:50:42
(19 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
e.fierstra
2026-06-10 23:08:29
(21 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-10 22:04:51
(22 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇳🇱
thedreamer.nl
2026-06-10 21:38:50
(23 hours ago)
34.182.57.210 - - [10/Jun/2026:23:33:18 +0200] "GET /.env.backup HTTP/1.1" 404 14 "-" "Mozilla/5.0 ( ...
show more
34.182.57.210 - - [10/Jun/2026:23:33:18 +0200] "GET /.env.backup HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 Safari/537.36" "US" "The Dalles" "45.59990" "-121.18710"
34.182.57.210 - - [10/Jun/2026:23:33:18 +0200] "GET /.env.prod.bak HTTP/1.1" 404 14 "-" "everyfeed-spider/2.0 (http://www.everyfeed.com)" "US" "The Dalles" "45.59990" "-121.18710"
34.182.57.210 - - [10/Jun/2026:23:33:18 +0200] "GET /backend/.env HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.3163.79 Safari/537.36 Maxthon/5.2.7.5000" "US" "The Dalles" "45.59990" "-121.18710"
34.182.57.210 - - [10/Jun/2026:23:33:18 +0200] "GET /backend/.env.local HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Linux; U; Android 2.0.1; de-de; Milestone Build/SHOLS_U2_01.14.0) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17" "US" "The Dalles" "45.59990" "-121.18710"
...
show less
Brute-Force
Bad Web Bot
🇳🇱
Site.eu
2026-06-10 15:07:49
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-06-10 08:41:53
(1 day ago)
(caddyscan) Scanner path probe from 34.182.57.210 (US/United States/210.57.182.34.bc.googleuserconte ...
show more
(caddyscan) Scanner path probe from 34.182.57.210 (US/United States/210.57.182.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.182.57.210 - - [10/Jun/2026:08:41:48 +0000] "GET /.env.prod HTTP/1.1"
[REDACTED] 200 2627 34.182.57.210 - - [10/Jun/2026:08:41:48 +0000] "GET /.env.prod.bak HTTP/1.1"
[REDACTED] 200 2627 34.182.57.210 - - [10/Jun/2026:08:41:48 +0000] "GET /.env.development HTTP/1.1"
[REDACTED] 200 2627 34.182.57.210 - - [10/Jun/2026:08:41:49 +0000] "GET /.env.old HTTP/1.1"
[REDACTED] 200 2627 34.182.57.210 - - [10/Jun/2026:08:41:49 +0000] "GET /.env~ HTTP/1.1"
show less
Port Scan
2026-06-10 08:38:12
(1 day ago)
Bot / seems abusive / Apache connections: 66
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 07:55:39
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.182.57.210 (210.57.182.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.57.210 (210.57.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 03:55:31.026039 2026] [security2:error] [pid 28573:tid 28573] [client 34.182.57.210:47566] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jamesclarklaw.com"] [uri "/.env.backup.txt"] [unique_id "aikYc5TS1yynmkUM-mbjrAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-10 06:37:16
(1 day ago)
{"level":"info","ts":1781073435.0774245,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781073435.0774245,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.182.57.210","remote_port":"35834","client_ip":"34.182.57.210","proto":"HTTP/1.1","method":"GET","host":"update.ilkjidcbedgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.prod.bak","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 6.0; zh-CN; KNT-UL10 Build/HUAWEIKNT-UL10) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 Quark/3.0.2.943 Mobile Safari/537.36"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000080183,"size":0,"status":308,"resp_headers":{"Connection":["close"],"Location":["https://update.ilkjidcbedgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.prod.bak"],"Content-Type":[],"Server":["Caddy"]}}
{"level":"info","ts":1781073435.0778987,"logger":"http.log.access.log1","msg":"handled request","request":{
...
show less
DDoS Attack
Web App Attack
🇩🇪
BlueWire Hosting
2026-06-10 05:07:24
(1 day ago)
Bad bot ignoring robot.txt
Bad Web Bot