🇵🇱
Gornik Zabrze
2026-11-06 07:06:40
UTC ·
(1 hour ago)
{"reqId":"0L3OZ8qea1BbXiw0u6dV","level":1,"time":"2026-11-06T08:06:37+01:00","remoteAddr":"34.62.165.220","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"34.62.165.220\" tried to access u ...
show more
{"reqId":"0L3OZ8qea1BbXiw0u6dV","level":1,"time":"2026-11-06T08:06:37+01:00","remoteAddr":"34.62.165.220","user":"--","app":"core","method":"GET","url":"/","scriptName":"/index.php","message":"Trusted domain error. \"34.62.165.220\" tried to access using \"host-89.25.194.37.static.3s.pl\" as host.","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36","version":"32.0.15.1","data":{"app":"core"}}
{"reqId":"m00PX2gqOTjBEP0h9rr4","level":1,"time":"2026-11-06T08:06:38+01:00","remoteAddr":"34.62.165.220","user":"--","app":"core","method":"GET","url":"/sitemap.xml","scriptName":"/index.php","message":"Trusted domain error. \"34.62.165.220\" tried to access using \"host-89.25.194.37.static.3s.pl\" as host.","userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot","version":"32.0.15.1","data":{"app":"core"}}
{"reqId":"HZfX0CDdycMQT77faZVg","level":1,"time":"202
...
show less
FTP Brute-Force
Port Scan
Hacking
Bad Web Bot
Brute-Force
Web App Attack
SSH
🇩🇪
EGP Abuse Dept
2026-11-06 05:51:46
UTC ·
(3 hours ago)
Scanning for web/db/file exploits on www.rudonijsselstein.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-11-06 05:33:06
UTC ·
(3 hours ago)
2026/11/06 05:32:59 [error] 2555552#2555552: *1795616 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/06 05:32:59 [error] 2555552#2555552: *179570 ...
show more
2026/11/06 05:32:59 [error] 2555552#2555552: *1795616 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/06 05:32:59 [error] 2555552#2555552: *1795703 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/06 05:33:04 [error] 2555552#2555552: *1795657 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /.npmrc HTTP/1.1", host: "app.kocerroxy.com"
2026/11/06 05:33:05 [error] 2555552#2555552: *1795718 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /.dev.vars HTTP/1.1", host: "app.kocerroxy.com"
2026/11/06 05:33:06 [error] 2555552#2555552: *1795718 access forbidden by rule, client: 34.62.165.220, server: kocerroxy.com, request: "GET /.amplifyrc HTTP/1.1", host: "app.kocerroxy.com"
...
show less
Web App Attack
🇵🇱
gandaflux
2026-11-06 04:57:53
UTC ·
(3 hours ago)
34.62.165.220 [redacted-domain] - [06/Nov/2026:05:57:51 +0100] "GET /build../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +[redacted-url]/support/amazonbot)"
34.62.165.220 [redacted-domain] - [06/Nov/2026:05:57:51 +0100] "GET / ...
show more
34.62.165.220 [redacted-domain] - [06/Nov/2026:05:57:51 +0100] "GET /build../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +[redacted-url]/support/amazonbot)"
34.62.165.220 [redacted-domain] - [06/Nov/2026:05:57:51 +0100] "GET /assets../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [redacted-email])"
34.62.165.220 [redacted-domain] - [06/Nov/2026:05:57:51 +0100] "GET /dist../.env HTTP/2.0" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +[redacted-url]/bot"
show less
Web App Attack
2026-11-06 04:50:09
UTC ·
(4 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
e.fierstra
2026-11-06 04:38:01
UTC ·
(4 hours ago)
excessive HTTP 404 errors
Bad Web Bot
2026-11-06 04:27:51
UTC ·
(4 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇳🇱
Savvii
2026-11-06 03:51:36
UTC ·
(5 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-06 03:02:30
UTC ·
(5 hours ago)
8.001 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇧🇾
lns.bz
2026-11-06 02:38:32
UTC ·
(6 hours ago)
.env scanning [BY]
Web App Attack
🇬🇷
setupgr
2026-11-06 02:12:22
UTC ·
(6 hours ago)
(mod_security) mod_security (id:11000011) triggered by 34.62.165.220 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:12:21.2826 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.62.165.220 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:12:21.282634 2026] [security2:error] [pid 654784:tid 655707] [client 34.62.165.220:53812] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 220.165.62.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/sitemap.xml"] [unique_id "au03hAXhWvt9DHB5pIGlKAAAA1g"]
show less
Port Scan
🇬🇧
andypiper
2026-11-06 02:02:26
UTC ·
(6 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
rzk
2026-11-06 01:28:08
UTC ·
(7 hours ago)
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: GOOGLE-CLOUD-PLATFORM. Country: BE. Timestamp: 2026-11-06T01:28:08+00:00.
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 01:10:42
UTC ·
(7 hours ago)
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.62.165.220 - - [06/Nov/2026:02:10:13 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 66152 "https://bruyntjebeer.nl/sitemap_index.xml ...
show more
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.62.165.220 - - [06/Nov/2026:02:10:13 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 66152 "https://bruyntjebeer.nl/sitemap_index.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.62.165.220 - - [06/Nov/2026:02:10:16 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 66045 "https://bruyntjebeer.nl/dist/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.62.165.220 - - [06/Nov/2026:02:10:16 +0100] "GET /ngsw.json HTTP/2.0" 404 66022 "https://bruyntjebeer.nl/ngsw.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0
...
show less
Bad Web Bot
Web App Attack
2026-11-06 00:19:39
UTC ·
(8 hours ago)
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
Web App Attack
