🇺🇸
TPI-Abuse
2026-10-13 10:52:34
(5 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.19.252.117 (117.252.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.19.252.117 (117.252.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:52:27.455395 2026] [security2:error] [pid 22460:tid 22460] [client 34.19.252.117:35190] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.ewingmissouri.com|F|2"] [data ".ewingmissouri.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.ewingmissouri.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.ewingmissouri.com"] [unique_id "as4Naz49RZjSUt2oSba9aQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-13 10:19:26
(38 minutes ago)
(badbots) Bad bot user-agent [redacted] from 34.19.252.117 (CA/Canada/117.252.19.34.bc.googleusercon ...
show more
(badbots) Bad bot user-agent [redacted] from 34.19.252.117 (CA/Canada/117.252.19.34.bc.googleusercontent.com)
show less
Hacking
🇩🇪
updown.io
2026-10-13 10:06:18
(51 minutes ago)
{"level":"info","ts":1791885976.707027,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791885976.707027,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.19.252.117","remote_port":"38170","client_ip":"34.19.252.117","proto":"HTTP/2.0","method":"GET","host":"status.goshorty.co.uk","uri":"/assets/manifest.json","headers":{"Sec-Fetch-Mode":["no-cors"],"Accept-Language":["en-US,en;q=0.9"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Microsoft Edge\";v=\"152\""],"Sec-Fetch-Dest":["script"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Fetch-Site":["same-origin"],"Sec-Ch-Ua-Mobile":["?1"],"Accept":["*/*"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Prior
...
show less
DDoS Attack
Web App Attack
🇳🇱
Site.eu
2026-10-13 09:22:28
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇪🇸
robotstxt
2026-10-13 09:19:09
(1 hour ago)
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /static/../../../a/../../../../.env HTTP/1.1" 40 ...
show more
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.252.117"
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.252.117"
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.252.117"
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.252.117"
34.19.252.117 - - [13/Oct/2026:09:19:06 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.252.117"
...
show less
Web Spam
Web App Attack
🇳🇱
Alt255
2026-10-13 09:13:24
(1 hour ago)
[ti-30al] Web exploit scanning: 9 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-30al] Web exploit scanning: 9 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.19.252.117 - - [13/Oct/2026:11:13:10 +0200] "GET /api/.env/public/.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.19.252.117 - - [13/Oct/2026:11:13:10 +0200] "GET /assets../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.19.252.117 - - [13/Oct/2026:11:13:10 +0200] "GET /media../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.19.252.117 - - [13/Oct/2026:11:13:10 +0200] "GET /files../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.19.252.117 - - [13/Oct/2026:11:13:10 +0200] "GET /static../.env HTTP/2.0" 404 2
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-13 09:12:03
(1 hour ago)
20 attempts against mh_ha-misbehave-ban on bud
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 09:07:43
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.19.252.117 (117.252.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.252.117 (117.252.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:07:38.264401 2026] [security2:error] [pid 18148:tid 18148] [client 34.19.252.117:50388] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "w4bw.net"] [uri "/.env"] [unique_id "as302hVil5s4l1bxJsZ_RgAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-13 09:00:11
(1 hour ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇩🇪
altenglaner
2026-10-13 08:52:36
(2 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
2026-10-13 08:52:10
(2 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇳🇱
Savvii
2026-10-13 08:48:41
(2 hours ago)
20 attempts against mh-misbehave-ban on bud
Brute-Force
Bad Web Bot
Web App Attack
2026-10-13 08:44:57
(2 hours ago)
Aggressive web scan
Web App Attack
2026-10-13 08:44:56
(2 hours ago)
T: f2b 404 5x
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-13 08:42:13
(2 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
