๐บ๐ธ
WizardsToolkit
2026-11-04 23:11:05
(3 minutes ago)
access attempt caught by wtkGetIPaddress;
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-11-04 22:46:50
(27 minutes ago)
(mod_security) mod_security (id:210730) triggered by 34.80.97.142 (142.97.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:46:43.121395 2026] [security2:error] [pid 724:tid 724] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.97.142 (142.97.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:46:43.121395 2026] [security2:error] [pid 724:tid 724] [client 34.80.97.142:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.swarnar.com|F|2"] [data ".swarnar.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.swarnar.com"] [uri "/z9x8c7v6b5-debug-trigger-www.swarnar.com"] [unique_id "auu10wckGpV9rxsi78TubQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ฐ
swrlly
2026-11-04 21:31:37
(1 hour ago)
1 unauthorized webserver connection
Web App Attack
๐ฏ๐ต
syakesaba
2026-11-04 20:13:27
(3 hours ago)
โ๏ธ This host failed 5 times connecting my WEB server. My contact: https://www.syakesaba.com/
Brute-Force
Web App Attack
Anonymous
2026-11-04 14:46:52
(8 hours ago)
34.80.97.142 - - [04/Nov/2026:16:46:49 +0200] "GET / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.97.142 - - [04/Nov/2026:16:46:50 +0200] "GET /sitemap.x ...
show more
34.80.97.142 - - [04/Nov/2026:16:46:49 +0200] "GET / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.97.142 - - [04/Nov/2026:16:46:50 +0200] "GET /sitemap.xml HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.80.97.142 - - [04/Nov/2026:16:46:50 +0200] "GET /sitemap_index.xml HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.80.97.142 - - [04/Nov/2026:16:46:51 +0200] "GET /graphql HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.97.142 - - [04/Nov/2026:16:46:51 +0200] "GET /settings/billing HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.97.142 - - [04/Nov/2026:16:46
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฆ
jacqueskruger
2026-11-04 08:34:55
(14 hours ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-03T08:35:02Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-03T08:35:02Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
๐บ๐ธ
Michael DEBILLY
2026-11-03 18:29:27
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-03T18:28:05.000Z.
Web App Attack
๐ฌ๐ง
consul.to
2026-11-03 17:10:02
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
raph
2026-11-03 14:30:16
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
EmilGH
2026-11-03 13:58:01
(1 day ago)
34.80.97.142 - - [03/Nov/2026:13:57:59 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.80.97.142 - - [03/Nov/2026:13:57:59 +0000] "GET /z9x8c7v6b5-debug-tr ...
show more
34.80.97.142 - - [03/Nov/2026:13:57:59 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.80.97.142 - - [03/Nov/2026:13:57:59 +0000] "GET /z9x8c7v6b5-debug-trigger-luthersales.com HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.80.97.142 - - [03/Nov/2026:13:57:59 +0000] "GET /asset-manifest.json HTTP/1.1" 404 3343 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.80.97.142 - - [03/Nov/2026:13:58:00 +0000] "GET /webpack-stats.json HTTP/1.1" 404 7299 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.80.97.142 - - [03/Nov/2026:13:58:00 +0000] "GET /5ngwa9tne8s2iirmv1vx HTTP/1.1" 404 7299 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.80.97.142 - - [03/Nov/2026:13:5
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฆ
jacqueskruger
2026-11-03 08:31:15
(1 day ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-03T00:59:51Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-03T00:59:51Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
๐ฒ๐พ
Rizzy
2026-11-03 07:36:42
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐บ๐ธ
Wootroot
2026-11-03 05:31:44
(1 day ago)
Honeypot (https): web recon/exploit probes
Web App Attack
Anonymous
2026-11-03 04:45:31
(1 day ago)
34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"\n34.80.97.142 mail.rolistore.com - [02/Nov/2 ...
show more
34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"\n34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET /robots.txt HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"\n34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET /sitemap.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"\n34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET /sitemap_index.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"\n34.80.97.142 mail.rolistore.com - [02/Nov/2026:22:45:29 -0600] "GET /z9x8c7v6b5-debug-trigger-mail.rolistore.com HTTP/1.1" 403 158 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"\n34.80.97.142 mail.
show less
DDoS Attack
Web App Attack
๐ฌ๐ง
andypiper
2026-11-03 02:00:21
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack