🇧🇪
cmbplf
2026-11-08 21:35:33
UTC ·
(4 days ago)
130 requests with url.path *config.json
Brute-Force
Bad Web Bot
Anonymous
2026-11-08 17:27:13
UTC ·
(4 days ago)
Bot / seems abusive / Apache connections: 329
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-11-08 17:07:28
UTC ·
(4 days ago)
Suspicious URL access.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 16:57:13
UTC ·
(4 days ago)
(mod_security) mod_security (id:210730) triggered by 34.80.39.91 (91.39.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:57:08.948421 2026] [security2:error] [pid 1413:tid 1413] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.39.91 (91.39.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 11:57:08.948421 2026] [security2:error] [pid 1413:tid 1413] [client 34.80.39.91:10992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||verticalafter.com|F|2"] [data ".tfstate.backup"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "verticalafter.com"] [uri "/vertical/tempvert.html/terraform.tfstate.backup"] [unique_id "avCp5LYKENqCqjPoHy7qOAAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Alpiskris
2026-11-08 16:16:16
UTC ·
(4 days ago)
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.git/HEAD HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.v ...
show more
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.git/HEAD HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.vite/manifest.json HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.docker/config.json HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.dockercfg HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.80.39.91 - - [08/Nov/2026:16:16:15 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Nerdscave Hosting
2026-11-08 14:10:02
UTC ·
(4 days ago)
Apache web server attack detected by Fail2Ban in plesk-apache jail
Web App Attack
🇩🇪
4server
2026-11-08 14:00:12
UTC ·
(4 days ago)
[SunNov0815:00:07.9767362026][security2:error][pid19680:tid19747][client34.80.39.91:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKIN ...
show more
[SunNov0815:00:07.9767362026][security2:error][pid19680:tid19747][client34.80.39.91:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"albertiarnaldoluigi.ch\"][uri\"/.docker/config.json\"][unique_id\"avCAZ_qDVbIhbdxbFk5XPwAAAIU\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-11-08 12:29:03
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-08 09:10:47
UTC ·
(5 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-11-08 06:40:03
UTC ·
(5 days ago)
| [Dangerous/Taiwan] Aggressive IP 34.80.39.91 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection