🇳🇱
Site.eu
2026-08-28 14:13:28
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
e.fierstra
2026-08-28 12:37:58
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
lavnet.net
2026-08-28 11:11:10
(1 day ago)
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0 ...
show more
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /wp-json HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /wp-json HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /secure HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Mobile Safari/537.36 EdgA/148.0.0.0"
34.74.34.49 - - [28/Aug/2026:11:11:09 +0000] "GET /rclone.conf HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.co
...
show less
Brute-Force
🇩🇪
pscriptos
2026-08-28 08:46:29
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇦🇺
FireGuard Server
2026-08-28 05:45:11
(1 day ago)
Blocked by os-abuseipdb; 3 hits, proto=tcp, ports=443,8080
Port Scan
Hacking
🇬🇧
kiwi.network
2026-08-28 05:43:45
(1 day ago)
Incessant port scan:
Port Scan
Hacking
Exploited Host
Anonymous
2026-08-28 03:20:45
(1 day ago)
34.74.34.49 - - [28/Aug/2026:05:20:45 +0200] "GET /rclone.conf HTTP/1.1" 403 6487 "-" "Mozilla/5.0 A ...
show more
34.74.34.49 - - [28/Aug/2026:05:20:45 +0200] "GET /rclone.conf HTTP/1.1" 403 6487 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] "
34.74.34.49 - - [28/Aug/2026:05:20:45 +0200] "GET /.git/config HTTP/1.1" 403 6487 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] "
...
show less
Web App Attack
🇹🇭
thaizone.com
2026-08-27 22:54:34
(1 day ago)
Brute Force Attack on a Web Resources (repeated 404) #1
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇩🇪
maxpower
2026-08-27 22:53:10
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.34.49 (US/United States/49.34.74.3 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.74.34.49 (US/United States/49.34.74.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.74.34.49 - - [28/Aug/2026:00:53:08 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 200 12062 "-" "Mozilla/5.0 (compatible; GoogleOther; +http://www.google.com/bot.html)" "100.107.246.32" host=checkall.cloud
show less
Port Scan
🇳🇱
homeshowdomain.nl
2026-08-27 22:00:17
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-26.
show less
Web App Attack
SSH
Hacking
🇺🇸
lavnet.net
2026-08-27 21:44:46
(1 day ago)
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /signin HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (Windo ...
show more
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /signin HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /z9x8c7v6b5-debug-trigger-texasgardenhomes.com HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /auth HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /secure HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
34.74.34.49 - - [27/Aug/2026:21:44:46 +0000] "GET /.git-credentials HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML
...
show less
Brute-Force
🇩🇪
initsol
2026-08-27 21:24:36
(1 day ago)
[Thu Aug 27 23:24:35.333434 2026] [authz_core:error] [pid 727979:tid 727979] [client 34.74.34.49:440 ...
show more
[Thu Aug 27 23:24:35.333434 2026] [authz_core:error] [pid 727979:tid 727979] [client 34.74.34.49:44012] AH01630: client denied by server configuration: /var/www/
[Thu Aug 27 23:24:35.444980 2026] [authz_core:error] [pid 727979:tid 727979] [client 34.74.34.49:44012] AH01630: client denied by server configuration: /var/www/rclone.conf
[Thu Aug 27 23:24:35.613843 2026] [authz_core:error] [pid 727979:tid 727979] [client 34.74.34.49:44012] AH01630: client denied by server configuration: /var/www/@fs
...
show less
Brute-Force
🇳🇱
cybertailor
2026-08-27 21:07:56
(1 day ago)
34.74.34.49 - - [27/Aug/2026:23:03:53 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; I ...
show more
34.74.34.49 - - [27/Aug/2026:23:03:53 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
34.74.34.49 - - [28/Aug/2026:00:42:47 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
34.74.34.49 - - [28/Aug/2026:00:42:47 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
34.74.34.49 - - [28/Aug/2026:02:07:53 +0500] "GET / HTTP/1.1" 404 142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.0.0 Safari/537.36"
...
show less
Port Scan
🇭🇺
DumaNet
2026-08-27 12:44:00
(2 days ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 27. 02:04:11
Source IP: 34.74. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 27. 02:04:11
Source IP: 34.74.34.49
Portion of the log(s):
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /.boto HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /.htpasswd HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /.svn/entries HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /docker-compose.yaml HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /secure HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /.s3cfg HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.34.49 - [27/Aug/2026:02:04:11 +0200] "GET /account HTTP
show less
Web App Attack
🇳🇱
Site.eu
2026-08-27 12:41:37
(2 days ago)
Excessive multi-domain requests
Brute-Force