🇩🇪
Holger
2026-11-05 18:28:55
UTC ·
(15 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
Anonymous
2026-11-04 04:32:19
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
helios.live
2026-11-03 17:14:50
UTC ·
(2 days ago)
2026/11/03 17:14:47 [error] 2189074#2189074: *1428418 access forbidden by rule, client: 34.62.189.96, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/03 17:14:47 [error] 2189076#2189076: *1428444 ...
show more
2026/11/03 17:14:47 [error] 2189074#2189074: *1428418 access forbidden by rule, client: 34.62.189.96, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/03 17:14:47 [error] 2189076#2189076: *1428444 access forbidden by rule, client: 34.62.189.96, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/11/03 17:14:48 [error] 2189074#2189074: *1428479 access forbidden by rule, client: 34.62.189.96, server: kocerroxy.com, request: "GET /.npmrc HTTP/1.1", host: "app.kocerroxy.com"
2026/11/03 17:14:49 [error] 2189074#2189074: *1428478 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 34.62.189.96, server: kocerroxy.com, request: "GET /config/.env.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
34.62.189.96 - - [03/Nov/2026:17:14:49 +0000] "GET /config/.env.php HTTP/1.1" 404
...
show less
Web App Attack
🇩🇪
akasolutions.de
2026-11-03 16:45:46
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.62.189.96 (BE/Belgium/96.189.62.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
Mailguard-FRD
2026-11-03 16:42:56
UTC ·
(2 days ago)
34.62.189.96 [03/Nov/2026:17:42:51 +0100] mail.[redacted] "GET /sitemap.xml HTTP/2.0" 404 107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexit
...
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-03 15:01:40
UTC ·
(2 days ago)
URL Probing: /.env
Web App Attack
🇨🇭
zynex
2026-11-03 14:37:36
UTC ·
(2 days ago)
CrowdSec crowdsecurity/http-path-traversal-probing
Web App Attack
🇫🇷
putputlaw
2026-11-03 14:35:43
UTC ·
(2 days ago)
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.keys HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.secret HTTP/2.0" 404 146 "-" "Mozilla/ ...
show more
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.keys HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.secret HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.credentials HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.dev.local HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.62.189.96 - - [03/Nov/2026:14:35:42 +0000] "GET /.env.production.local HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Web App Attack
🇳🇱
Savvii
2026-11-03 14:18:26
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on solar
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-03 13:44:21
UTC ·
(2 days ago)
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-03 13:20:17
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.62.189.96 (96.189.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:20:10.511179 2026] [security2:error] [pid 616:tid 616] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.189.96 (96.189.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 08:20:10.511179 2026] [security2:error] [pid 616:tid 616] [client 34.62.189.96:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "hvacs-aircon.com"] [uri "/core/.env"] [unique_id "aunfimq2tGpFEnKRD1Zv6wAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 13:03:14
UTC ·
(2 days ago)
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /sitemap.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET ...
show more
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /sitemap.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /sitemap_index.xml HTTP/1.1" 404 497 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /api-docs HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /billing HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET /settings/security HTTP/1.1" 404 497 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.62.189.96 - - [03/Nov/2026:14:03:12 +0100] "GET
...
show less
DDoS Attack
Anonymous
2026-11-03 12:24:55
UTC ·
(2 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇫🇷
Murazaki
2026-11-03 11:25:22
UTC ·
(2 days ago)
project.balamb.fr 34.62.189.96 - - [03/Nov/2026:12:25:22 +0100] "-" 500 170 "-" "-" "-"
...
Hacking
🇸🇪
vaia.cloud
2026-11-03 11:25:03
UTC ·
(2 days ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack