🇩🇪
jack252
2026-11-06 20:03:56
UTC ·
(16 hours ago)
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:52 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 10 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:53 +0 ...
show more
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:52 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /sitemap.xml HTTP/2.0" 404 10 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:53 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /assets/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:54 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /assets/js/webcomponents.js.map HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:55 +0100] "TLSv1.3/TLS_AES_256_GCM_SHA384" "GET /apps/admin/.env HTTP/2.0" 404 11 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
git.0xfc.de 34.84.10.24 - - [06/Nov/2026:21:03:55
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-11-06 19:54:56
UTC ·
(16 hours ago)
34.84.10.24 - - [06/Nov/2026:21:54:55 +0200] "GET /.env.test HTTP/2.0" 403 146 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.84.10.24 - - [06/Nov/2026:21:54:55 +0200] "GET /.env.development HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (K ...
show more
34.84.10.24 - - [06/Nov/2026:21:54:55 +0200] "GET /.env.test HTTP/2.0" 403 146 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.84.10.24 - - [06/Nov/2026:21:54:55 +0200] "GET /.env.development HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Web App Attack
🇺🇸
oralunal
2026-11-06 19:52:19
UTC ·
(17 hours ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
🇧🇾
lns.bz
2026-11-06 19:11:20
UTC ·
(17 hours ago)
.env scanning [BY]
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 18:47:26
UTC ·
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇮🇹
CoreTech srl
2026-11-06 18:31:29
UTC ·
(18 hours ago)
cloudlinux2 fail2ban: 2026-11-06 18:43:44,915 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 136.144.35.225 - 2026-11-06 18:43:44cloudlinux2 fail2ban: 2026-11-06 18:43:48,291 fail2ban.filter [1651]: INFO [plesk-wordpress] ...
show more
cloudlinux2 fail2ban: 2026-11-06 18:43:44,915 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 136.144.35.225 - 2026-11-06 18:43:44cloudlinux2 fail2ban: 2026-11-06 18:43:48,291 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 136.144.35.225 - 2026-11-06 18:43:47cloudlinux2 fail2ban: 2026-11-06 18:44:46,870 fail2ban.filter [1651]: INFO [plesk-wordpress] Found 142.111.152.186 - 2026-11-06 18:44:46cloudlinux2 fail2ban: 2026-11-06 18:44:53,012 fail2ban.actions [1651]: NOTICE [plesk-modsecurity] Unban 196.3.219.95cloudlinux2 fail2ban: 2026-11-06 18:45:48,735 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.84.10.24 - 2026-11-06 18:45:48cloudlinux2 fail2ban: 2026-11-06 18:45:48,852 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.84.10.24 - 2026-11-06 18:45:48cloudlinux2 fail2ban: 2026-11-06 18:45:49,384 fail2ban.filter [1651]: INFO [plesk-modsecurity] Found 34.84.10.24 - 2026-11-06 18:45:49cloudlinux2 fail2ban: 2026
show less
Web App Attack
🇩🇪
snhosting
2026-11-06 18:09:08
UTC ·
(18 hours ago)
34.84.10.24 - - [06/Nov/2026:19:08:52 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.84.10.24 - - [06/Nov/2026:19:08:53 +0100] "GET /sitemap. ...
show more
34.84.10.24 - - [06/Nov/2026:19:08:52 +0100] "GET /robots.txt HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.84.10.24 - - [06/Nov/2026:19:08:53 +0100] "GET /sitemap.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.84.10.24 - - [06/Nov/2026:19:08:53 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.84.10.24 - - [06/Nov/2026:19:08:54 +0100] "GET /dist/.vite/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.10.24 - - [06/Nov/2026:19:08:54 +0100] "GET /build/manifest.json HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇨🇦
CentiDevOps
2026-11-06 18:08:24
UTC ·
(18 hours ago)
Web app scan: 44 requests in 0 s across 2 domains (301/404/444). Paths: /build../.env, /css../.env, /dist../.env (+17 more). Sample: 2026-11-06T18:08:24Z "GET /build../.env" 301
Hacking
Web App Attack
Anonymous
2026-11-06 18:03:53
UTC ·
(18 hours ago)
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /.vite/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800 ...
show more
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /.vite/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /build/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /dist/.vite/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /ngsw.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.84.10.24 - - [07/Nov/2026:02:03:52 +0800] "GET /build/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 17:36:15
UTC ·
(19 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇺🇸
TPI-Abuse
2026-11-06 17:11:26
UTC ·
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.10.24 (24.10.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:11:22.195459 2026] [security2:error] [pid 4449:tid 4449] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.10.24 (24.10.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:11:22.195459 2026] [security2:error] [pid 4449:tid 4449] [client 34.84.10.24:57624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.madisonmedia.ai"] [uri "/prisma/.env"] [unique_id "au4KOtv5F8kb3hm1blD9GgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-11-06 16:54:04
UTC ·
(20 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇩🇪
palla89
2026-11-06 16:37:41
UTC ·
(20 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.84.10.24 (JP/Japan/24.10.84.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Alt255
2026-11-06 16:29:44
UTC ·
(20 hours ago)
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.84.10.24 - - [06/Nov/2026:17:29:33 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0 ...
show more
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.84.10.24 - - [06/Nov/2026:17:29:33 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.84.10.24 - - [06/Nov/2026:17:29:33 +0100] "GET /nt0vmdd0hjm1irh7dmaq HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.84.10.24 - - [06/Nov/2026:17:29:33 +0100] "GET /z9x8c7v6b5-debug-trigger-git.1ofa.nl HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.84.10.24 - - [06/Nov/2026:17:29:33 +0100] "GET /leh78km4grduj3i4xggy HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
0022.alt2
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 16:27:47
UTC ·
(20 hours ago)
34.84.10.24 - - [07/Nov/2026:00:27:46 +0800] "GET /uploads../.env HTTP/1.1" 200 19012 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
Bad Web Bot
Web App Attack