🇳🇱
Cloud86 B.V.
2026-10-29 05:23:04
(2 days ago)
categories: Email Spam
Email Spam
2026-10-29 05:22:04
(2 days ago)
SPAM EMAIL 34.168.209.64 (RBL_TRIGGER)
Email Spam
🇩🇪
FD-IX
2026-10-29 05:13:26
(2 days ago)
SMTP connection rejected due to combined.mail.abusix.zone listing.
Email Spam
🇳🇱
homeshowdomain.nl
2026-10-22 22:02:53
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-21.
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-10-21 18:21:44
(1 week ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
2026-10-21 18:17:40
(1 week ago)
Fail2Ban nginx-scanner-critical: critical web exploit scan
Web App Attack
🇳🇱
Alt255
2026-10-21 18:13:23
(1 week ago)
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.168.209.64 - - [21/Oct/2026:20:13:06 +0200] "GET /.env.config HTTP/2.0" 301 317 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
.. ...
show more
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.168.209.64 - - [21/Oct/2026:20:13:06 +0200] "GET /.env.config HTTP/2.0" 301 317 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Bad Web Bot
Web App Attack
🇪🇸
pipeline.es
2026-10-21 18:12:00
(1 week ago)
Web scanning / probing for vulnerable paths | URL: /login | Evidence: volandoviajes.com.co 34.168.209.64 - - [21/Oct/2026:20:09:11 +0200] \"GET /login HTTP/2.0\" 404 33747 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KH ...
show more
Web scanning / probing for vulnerable paths | URL: /login | Evidence: volandoviajes.com.co 34.168.209.64 - - [21/Oct/2026:20:09:11 +0200] \"GET /login HTTP/2.0\" 404 33747 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0\" GEOIP_COUNTRY_CODE=US 37354 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇺🇸
Starburst SysOp Team
2026-10-21 17:51:57
(1 week ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-7)
show less
Bad Web Bot
🇺🇸
mnsf
2026-10-21 17:05:50
(1 week ago)
Too many Status 40X (22)
Scanning/Probing (69)
Request Overload (218)
Brute-Force
Web App Attack
🇨🇭
Origon
2026-10-21 16:47:38
(1 week ago)
http-probing - IP: 34.168.209.64 - time="2026-10-21T18:47:38+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.168.209.64 (US/396982) : 4h ban on Ip 34.168.209.64" module=db
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 16:46:53
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.168.209.64 (64.209.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:46:48.206562 2026] [security2:error] [pid 28819:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.168.209.64 (64.209.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 12:46:48.206562 2026] [security2:error] [pid 28819:tid 28819] [client 34.168.209.64:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||luisguacache.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "luisguacache.com"] [uri "/z9x8c7v6b5-debug-trigger-luisguacache.com"] [unique_id "atjseBIur6KkEPj11YseowAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Victor López
2026-10-21 16:39:26
(1 week ago)
lavadodepisosbogota.com 34.168.209.64 - - [21/Oct/2026:11:39:26 -0500] "GET /.env.supabase HTTP/2.0" 404 11457 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" -
lavadodepisosbogot ...
show more
lavadodepisosbogota.com 34.168.209.64 - - [21/Oct/2026:11:39:26 -0500] "GET /.env.supabase HTTP/2.0" 404 11457 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" -
lavadodepisosbogota.com 34.168.209.64 - - [21/Oct/2026:11:39:26 -0500] "GET /.env.prod.local HTTP/2.0" 404 11457 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" -
lavadodepisosbogota.com 34.168.209.64 - - [21/Oct/2026:11:39:26 -0500] "GET /.env.testing HTTP/2.0" 404 11457 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" -
...
show less
Hacking
Web App Attack
2026-10-21 16:37:01
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-10-21 16:26:26
(1 week ago)
Web application attack: grafana cve 2021 43798; Web application attack: http sensitive files; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Probing for exposed secret / credential files
Hacking
Web App Attack
