|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.75.253.16 (US/United States/16.253.75.34.bc.googleusercontent.com)
|
SQL Injection
|
|
Anonymous
|
|
sensitive path probe detected by fail2ban
...
|
Port Scan
Web App Attack
|
|
Anonymous
|
|
SIEM ALERT AUTO REPORT
|
Email Spam
|
|
🇵🇹
WebTejo
|
|
Detected multiple authentication failures and invalid user attempts in LF_CPANEL from IP address 34.75.253.16 on [PT] Tucano Node.
|
Brute-Force
SSH
|
|
Anonymous
|
|
(mod_security) mod_security triggered on hostname [redacted])
|
SQL Injection
|
|
🇺🇸
jormaster3k
|
|
Attack against Apache (too many 404s)
|
Web App Attack
|
|
🇳🇱
Alt255
|
|
[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.75.253.16 - - [02/Nov/2026:18:14:46 +0100] "GET /ngsw.json HTTP/2.0" 404 98456 "https://krantvandeaarde.nl/ngsw.json" "Mozilla/5.0 ...
show more
[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.75.253.16 - - [02/Nov/2026:18:14:46 +0100] "GET /ngsw.json HTTP/2.0" 404 98456 "https://krantvandeaarde.nl/ngsw.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.75.253.16 - - [02/Nov/2026:18:14:46 +0100] "GET /build/manifest.json HTTP/2.0" 404 98334 "https://krantvandeaarde.nl/build/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.75.253.16 - - [02/Nov/2026:18:14:46 +0100] "GET /.vite/manifest.json HTTP/2.0" 404 98307 "https://krantvandeaarde.nl/.vite/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile S
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
radardatelecom
|
|
Blocked by Radar da Telecom firewall — abuseipdb
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.75.253.16 - - [02/Nov/2026:17:33:18 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win ...
show more
[cb-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.75.253.16 - - [02/Nov/2026:17:33:18 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.75.253.16 - - [02/Nov/2026:17:33:18 +0100] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.75.253.16 - - [02/Nov/2026:17:33:22 +0100] "GET /1wrh1gzi88hrjte355vg HTTP/2.0" 404 17060 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.75.253.16 - - [02/Nov/2026:17:33:22 +0100] "GET /build/manifest.json HTTP/2.0" 404 17060 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chr
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇦🇺
AWW-Admin
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.75.253.16 (US/United States/16.253.75.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇺🇸
iwle
|
|
[Mon Nov 02 11:01:33.984895 2026] [:error] [pid 310558:tid 310668] [client 34.75.253.16:0] [client 34.75.253.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.p ...
show more
[Mon Nov 02 11:01:33.984895 2026] [:error] [pid 310558:tid 310668] [client 34.75.253.16:0] [client 34.75.253.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "dashboard.iwle.com"] [uri "/js../.env"] [unique_id "auiz3cP7WXZVVsFwaN5tbQAAAJY"]
[Mon Nov 02 11:01:33.987453 2026] [:error] [pid 310698:tid 310726] [client 34.75.253.16:0] [client 34.75.253.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.75.253.16 (16.253.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:24:15.892137 2026] [security2:error] [pid 32697:tid 32 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.75.253.16 (16.253.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 10:24:15.892137 2026] [security2:error] [pid 32697:tid 32697] [client 34.75.253.16:38538] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.jennifergiesler.com|F|2"] [data ".jennifergiesler.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.jennifergiesler.com"] [uri "/z9x8c7v6b5-debug-trigger-www.jennifergiesler.com"] [unique_id "auirH0zk6zII2uidmgLCHwAAADY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
masterguru
|
|
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
|
Hacking
|
|
🇬🇧
Celtic
|
|
Blocked by Fail2Ban with Jail (plesk-modsecurity)
|
Brute-Force
SSH
|
