๐ญ๐บ
DumaNet
2026-10-09 04:35:00
(3 days ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Oct 08. 20:02:16
Source IP: 34.23. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Oct 08. 20:02:16
Source IP: 34.23.24.178
Portion of the log(s):
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /settings/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /api/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /admin/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET /dashboard/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.23.24.178 - [08/Oct/2026:20:02:16 +0200] "GET
show less
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-08 18:50:04
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
netman
2026-10-08 18:23:23
(3 days ago)
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozill ...
show more
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET / HTTP/2.0" 200 257732 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET /webpack-stats.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET /static/manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET /asset-manifest.json HTTP/2.0" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.23.24.178 netmanagement.ae - [08/Oct/2026:18:23:19 +0000] "GET /m
...
show less
DDoS Attack
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 18:15:06
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 14:15:01.430452 2026] [security2:error] [pid 10687:tid 10687] [client 34.23.24.178:48126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "netguard.us"] [uri "/images../.env"] [unique_id "asfdpWpkWtPZb_2CB5wBywAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-10-08 17:56:06
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 17:53:55
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 13:53:51.540391 2026] [security2:error] [pid 28168:tid 28168] [client 34.23.24.178:38774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "net-gal.com"] [uri "/static../.env"] [unique_id "asfYr7ctj9zqixZ9mnQIhwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MarkGGN
2026-10-08 17:50:00
(3 days ago)
Web attack. 34.23.24.178 - - [08/Oct/2026:19:49:59 +0200] "GET /.htpasswd HTTP/2.0" 404 742 "-" "Moz ...
show more
Web attack. 34.23.24.178 - - [08/Oct/2026:19:49:59 +0200] "GET /.htpasswd HTTP/2.0" 404 742 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.23.24.178 - - [08/Oct/2026:19:49:59 +0200] "POST /v1/graphql HTTP/2.0" 404 572 "https://mk.cx" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-08 17:47:09
(3 days ago)
20 attempts against mh-misbehave-ban on melon
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
grassau.com
2026-10-08 17:43:36
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.23.24.178 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.23.24.178 (US/United States/South Carolina/North Charleston/178.24.23.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฉ๐ช
HandyTreff.de
2026-10-08 17:08:55
(3 days ago)
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -66.809 (Bad < -10 / Very Bad < -20 ...
show more
Bot/Spam/Scrapper attack detected on www.handytreff.de - Score: -66.809 (Bad < -10 / Very Bad < -20 / Extreme < -35) | UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Sa
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
ger-stg-sifi1
2026-10-08 16:58:13
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-08 16:55:45
(3 days ago)
Login credentials theft attempt
Hacking
๐จ๐ญ
zynex
2026-10-08 16:55:15
(3 days ago)
URL Probing: /api/.env
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-08 16:55:01
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-08 16:26:30
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.24.178 (178.24.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:26:27.058466 2026] [security2:error] [pid 32424:tid 32424] [client 34.23.24.178:57820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ic1.biz"] [uri "/.htpasswd"] [unique_id "asfEM6rHStzulmGKV3JSkgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack