|
🇫🇷
CaduVet
|
|
2026-10-08 20:24:14,688 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 06:24:07,559 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 07:14:51,498 fail2ban.actions ...
show more
2026-10-08 20:24:14,688 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 06:24:07,559 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 07:14:51,498 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
...
show less
|
Brute-Force
|
|
🇳🇱
taivas.nl
|
|
General_bad_requests
|
Bad Web Bot
|
|
🇫🇷
CaduVet
|
|
2026-10-08 20:24:14,688 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 06:24:07,559 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 07:14:51,498 fail2ban.actions ...
show more
2026-10-08 20:24:14,688 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 06:24:07,559 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
2026-10-09 07:14:51,498 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.21.245.101
...
show less
|
Brute-Force
|
|
🇫🇷
Sklurk
|
|
Web App Attack
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.21.245.101 (101.245.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:23:57.231713 2026] [security2:error] [pid 4164:tid 4 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.21.245.101 (101.245.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:23:57.231713 2026] [security2:error] [pid 4164:tid 4164] [client 34.21.245.101:53876] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||rodeeinsurance.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "rodeeinsurance.com"] [uri "/z9x8c7v6b5-debug-trigger-rodeeinsurance.com"] [unique_id "asheTZo9aYMOoVV8lObdBgAAABI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
Halux
|
|
34.21.245.101 Web Application Firewall multiple violations
|
Hacking
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.21.245.101 (101.245.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:00:40.653852 2026] [security2:error] [pid 2221:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.245.101 (101.245.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:00:40.653852 2026] [security2:error] [pid 2221:tid 2221] [client 34.21.245.101:52672] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "rocknwalktours.com"] [uri "/.htpasswd"] [unique_id "ashY2G2_1SQtT3M9rGHUJwAAABA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇾
lns.bz
|
|
Too many 404 requests [BY]
|
Web App Attack
|
|
🇺🇸
jormaster3k
|
|
Attack against Apache (too many 404s)
|
Web App Attack
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.21.245.101 (SG/Singapore/101.245.21.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇳🇱
Alt255
|
|
[ti-24al] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail apache-404. Example: 34.21.245.101 - - [09/Oct/2026:04:15:37 +0200] "POST /graphql HTTP/2.0" 404 13124 "https://robwalters.nl" "Mozilla/5.0 (Macintosh; In ...
show more
[ti-24al] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail apache-404. Example: 34.21.245.101 - - [09/Oct/2026:04:15:37 +0200] "POST /graphql HTTP/2.0" 404 13124 "https://robwalters.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.245.101 - - [09/Oct/2026:04:15:37 +0200] "GET /asset-manifest.json HTTP/2.0" 404 35121 "https://robwalters.nl/asset-manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.245.101 - - [09/Oct/2026:04:15:38 +0200] "GET /wlhe46c2x3ybzaf8wmds HTTP/2.0" 404 35117 "https://robwalters.nl/wlhe46c2x3ybzaf8wmds" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.21.245.101 - - [09/Oct/2026:04:15:38 +0200
...
show less
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
🇪🇸
robotstxt
|
|
34.21.245.101 - - [09/Oct/2026:02:05:54 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_de1c23c5b31bd1d3f681ab0d8c0c8355.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/ ...
show more
34.21.245.101 - - [09/Oct/2026:02:05:54 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_de1c23c5b31bd1d3f681ab0d8c0c8355.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.21.245.101"
34.21.245.101 - - [09/Oct/2026:02:05:54 +0000] "GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/2.0" 403 15484 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.21.245.101"
34.21.245.101 - - [09/Oct/2026:02:05:54 +0000] "GET /?2f320d=756fe99a1b.js& HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.21.245.101"
34.21.245.101 - - [09/Oct/2026:02:05:54 +0000] "GET /wp-includes/js/dist/script-modules/interactiv
...
show less
|
Web App Attack
|
|
Anonymous
|
|
Banned by Fail2Ban on server
|
Web App Attack
|