🇳🇱
e.fierstra
2026-11-06 09:44:24
UTC ·
(1 week ago)
excessive HTTP 404 errors
Bad Web Bot
🇷🇴
gtheo99
2026-11-06 09:39:25
UTC ·
(1 week ago)
(CT) IP 34.21.168.78 (SG/Singapore/78.168.21.34.bc.googleusercontent.com) found to have 155 connections
Port Scan
🇺🇸
TPI-Abuse
2026-11-06 09:37:37
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:37:29.443263 2026] [security2:error] [pid 5932:tid 593 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:37:29.443263 2026] [security2:error] [pid 5932:tid 5932] [client 34.21.168.78:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gregquinn.com"] [uri "/.env.keys"] [unique_id "au2f2WA6XNL7Gke45MFS7AAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 09:13:14
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:13:10.414236 2026] [security2:error] [pid 9164:tid 916 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:13:10.414236 2026] [security2:error] [pid 9164:tid 9164] [client 34.21.168.78:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.grainavi.com"] [uri "/.env.supabase"] [unique_id "au2aJmeaR2l0hCFboxo-jgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-11-06 09:10:36
UTC ·
(1 week ago)
2026-11-06 11:10:34,113 fail2ban.actions [1215583]: NOTICE [apache-scan] Ban 34.21.168.78
2026-11-06 11:10:34,763 fail2ban.actions [1215583]: NOTICE [apache-404] Ban 34.21.168.78
2026-11-06 11:10:35,078 fail2ban.actions [121558 ...
show more
2026-11-06 11:10:34,113 fail2ban.actions [1215583]: NOTICE [apache-scan] Ban 34.21.168.78
2026-11-06 11:10:34,763 fail2ban.actions [1215583]: NOTICE [apache-404] Ban 34.21.168.78
2026-11-06 11:10:35,078 fail2ban.actions [1215583]: NOTICE [apache-security] Ban 34.21.168.78
2026-11-06 11:10:35,131 fail2ban.actions [1215583]: NOTICE [apache-dirscan] Ban 34.21.168.78
2026-11-06 11:10:35,309 fail2ban.actions [1215583]: NOTICE [web-scanner] Ban 34.21.168.78
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 08:56:33
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:56:28.017382 2026] [security2:error] [pid 25359:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.168.78 (78.168.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:56:28.017382 2026] [security2:error] [pid 25359:tid 25374] [client 34.21.168.78:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.humanet.io"] [uri "/apps/api/.env"] [unique_id "au2WPFuIYBL0xKJMKJ1lGAAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
bazter.pro
2026-11-06 08:50:43
UTC ·
(1 week ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
vagari
2026-11-06 05:15:50
UTC ·
(1 week ago)
Probing for secret files: /api/v1/.env, /api/.env.bak
Web App Attack
🇬🇧
consul.to
2026-11-06 04:05:59
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇾
lns.bz
2026-11-06 03:48:23
UTC ·
(1 week ago)
.env scanning [BY]
Web App Attack
🇬🇧
andypiper
2026-11-06 02:03:20
UTC ·
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-11-06 01:08:06
UTC ·
(1 week ago)
7.966 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇩🇪
big-cloud.nl
2026-11-06 00:14:10
UTC ·
(1 week ago)
Try to access /assets../.env
Web App Attack
🇩🇪
arnisolutions
2026-11-05 23:22:45
UTC ·
(1 week ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-11-05 and 2026-11-05 (UTC). Additional activity: 410flood. Sample request: GET /.env.save HTTP/2.0
Web App Attack
Hacking
🇫🇷
SpaceHost-Server
2026-11-05 23:19:49
UTC ·
(1 week ago)
Brute-Force
Web App Attack
