🇨🇭
dalslab ltd
2026-11-06 13:00:48
UTC ·
(52 seconds ago)
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.860 by zone "rl_per_ip", client: 34.74.102.237, server: auth.dalslab.com, request: "GET /gcp-service.json HTTP/2.0", host: "auth.dalslab.com"
2026/11/06 14:00:47 [error] 499# ...
show more
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.860 by zone "rl_per_ip", client: 34.74.102.237, server: auth.dalslab.com, request: "GET /gcp-service.json HTTP/2.0", host: "auth.dalslab.com"
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.800 by zone "rl_per_ip", client: 34.74.102.237, server: auth.dalslab.com, request: "GET /gc-service.json HTTP/2.0", host: "auth.dalslab.com"
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.720 by zone "rl_per_ip", client: 34.74.102.237, server: auth.dalslab.com, request: "GET /.env.old HTTP/2.0", host: "auth.dalslab.com"
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.580 by zone "rl_per_ip", client: 34.74.102.237, server: auth.dalslab.com, request: "GET /google-services.json HTTP/2.0", host: "auth.dalslab.com"
2026/11/06 14:00:47 [error] 499#499: *386909 limiting requests, excess: 200.570 by zone "rl_per_ip", client: 34.74.102.237, server: a
...
show less
Brute-Force
SSH
🇨🇭
dalslab ltd
2026-11-06 12:26:55
UTC ·
(34 minutes ago)
34.74.102.237 - - [06/Nov/2026:13:26:52 +0100] "POST /graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.74.102.237 - - [06/Nov/202 ...
show more
34.74.102.237 - - [06/Nov/2026:13:26:52 +0100] "POST /graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.74.102.237 - - [06/Nov/2026:13:26:53 +0100] "POST /api/graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.74.102.237 - - [06/Nov/2026:13:26:53 +0100] "POST /v1/graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[06/Nov/2026:13:26:53 +0100] - 404 404 - GET https tracking.dalslab.com "/api/script.js.map" [Client 34.74.102.237] [Length 89] [Gzip -] [Sent-to ] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
34.74.102.237 - - [06/Nov/2026:13:26:54 +0100] "GET /%2E%2
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-11-06 11:17:27
UTC ·
(1 hour ago)
(badbots) Bad bot user-agent [redacted] from 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com)
Hacking
Anonymous
2026-11-06 10:54:59
UTC ·
(2 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
Anonymous
2026-11-06 10:23:38
UTC ·
(2 hours ago)
FortiWeb WAF: 6 attacks detected. Threat Score: 6025. Types: Client Management(3), Block IP List(3). Origin: United States.
Web App Attack
🇳🇱
Savvii
2026-11-06 09:41:45
UTC ·
(3 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 05:13:27
UTC ·
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
maxpower
2026-11-06 04:03:49
UTC ·
(8 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026:05:03:47 +0100] "GET /.aws/credentials%3F.txt HTTP/2.0" 429 41 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "172.26.116.230,34.74.102.237" host=masterlabvideoproduzioni.it
show less
Port Scan
🇩🇪
iNetWorker
2026-11-06 03:32:21
UTC ·
(9 hours ago)
trolling for resource vulnerabilities
Web App Attack
🇩🇪
maxpower
2026-11-06 03:15:33
UTC ·
(9 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026:04:15:29 +0100] "GET /ses.env HTTP/2.0" 429 41 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "192.168.242.144,34.74.102.237" host=ipv6.marialauracaselli.com
show less
Port Scan
🇩🇪
maxpower
2026-11-06 02:48:49
UTC ·
(10 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.102.237 (US/United States/237.102.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.102.237 - - [06/Nov/2026:03:48:44 +0100] "GET /process.env HTTP/2.0" 404 201 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "192.168.37.168,34.74.102.237" host=ipv6.conapipescara.it
show less
Port Scan
🇫🇮
kumiko
2026-11-06 02:44:48
UTC ·
(10 hours ago)
[2026-11-06 04:44:47] Persistent attack/probing over several days.
Port Scan
Brute-Force
Bad Web Bot
🇫🇮
kumiko
2026-11-06 02:24:44
UTC ·
(10 hours ago)
[2026-11-06 04:24:44] User-Agent Spoofing (6 unique User-Agent strings from the same IP address within 1 seconds)
Bad Web Bot
🇰🇷
fanbinit
2026-11-06 02:17:05
UTC ·
(10 hours ago)
Repeated requests for sensitive configuration or repository paths.
Web App Attack
🇺🇸
Charlesiv
2026-11-06 01:21:23
UTC ·
(11 hours ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /var/.env
Timestamp: 2026-11-06T01:10:43Z
Ray ID: a56038583d4a8175
UA: Mozilla/5.0 (compatible; cohere-ai; +https: ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /var/.env
Timestamp: 2026-11-06T01:10:43Z
Ray ID: a56038583d4a8175
UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
show less
Bad Web Bot