🇧🇪
taivas.nl
2026-10-11 04:32:47
(2 weeks ago)
Many_bad_calls
Web App Attack
🇩🇪
hbrks
2026-10-11 03:01:44
(2 weeks ago)
200 attack(s) detected, such as these: {"event":"web_block","ip":"34.53.42.173","host":"api.marche-b ...
show more
200 attack(s) detected, such as these: {"event":"web_block","ip":"34.53.42.173","host":"api.marche-be.com","request":"GET /app HTTP/2.0","user_agent":"","reason":"Status-404","timestamp":"2026-10-11T03:01:44 00:00","logentry":"api.marche-be.com 34.53.42.173 - - [11/Oct/2026:03:01:44 0000] \"GET /app HTTP/2.0\" 404 0 \"-\" \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36\" \"172.25.79.30:5000\""} * Report Details *: https://p4u.xyz/JFA9S01ZWM0/1* IP Details *: https://p4u.xyz/JFA9S01ZWM0/2
show less
Web Spam
Hacking
Bad Web Bot
🇳🇱
WeCloudit-Anti-Abuse
2026-10-11 02:22:56
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇩🇪
XICTRON
2026-10-11 02:15:07
(2 weeks ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇩🇪
creoline GmbH
2026-10-11 02:04:46
(2 weeks ago)
[WAF] Multiple suspicious HTTP requests has been blocked
Bad Web Bot
Web App Attack
2026-10-11 01:49:48
(2 weeks ago)
34.53.42.173 - - [11/Oct/2026:03:49:33 +0200] "GET HTTP/2.0" 403 268 "-" "Mozilla/5.0 (compatible; ...
show more
34.53.42.173 - - [11/Oct/2026:03:49:33 +0200] "GET HTTP/2.0" 403 268 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
2026-10-11 01:48:10
(2 weeks ago)
[Sun Oct 11 01:48:09.431936 2026] [security2:error] [pid 121280:tid 121280] [client 34.53.42.173:396 ...
show more
[Sun Oct 11 01:48:09.431936 2026] [security2:error] [pid 121280:tid 121280] [client 34.53.42.173:39694] [client 34.53.42.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "warmides.com"] [uri "/api/system/fileView"] [unique_id "asrq2VFWIPQm2wQmLKNsWgAAABQ"]
[Sun Oct 11 01:48:09.576638 2026] [security2:error] [pid 121282:tid 121282] [client 34.53.42.173:39652] [client 34.53.42.173] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 10
...
show less
Web App Attack
🇩🇪
svr
2026-10-11 01:47:42
(2 weeks ago)
Abusive Automated Web Scanner
Web App Attack
🇸🇪
vaia.cloud
2026-10-11 01:45:02
(2 weeks ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
2026-10-11 01:35:22
(2 weeks ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
TPI-Abuse
2026-10-11 01:01:51
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.53.42.173 (173.42.53.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.53.42.173 (173.42.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:01:48.477399 2026] [security2:error] [pid 17911:tid 17911] [client 34.53.42.173:47436] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||samanthasomers.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "samanthasomers.com"] [uri "/z9x8c7v6b5-debug-trigger-samanthasomers.com"] [unique_id "asrf_AV3Txq5O9nnxriJLQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-10-11 01:01:41
(2 weeks ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇧🇪
taivas.nl
2026-10-11 00:32:14
(2 weeks ago)
Bad_requests
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-11 00:14:11
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.53.42.173 (173.42.53.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.53.42.173 (173.42.53.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:14:05.438504 2026] [security2:error] [pid 29880:tid 29880] [client 34.53.42.173:37052] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sailinghonu.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sailinghonu.com"] [uri "/z9x8c7v6b5-debug-trigger-sailinghonu.com"] [unique_id "asrUzUCBcDz9_yg9ifHNlwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-10-11 00:00:55
(2 weeks ago)
(badbots) Bad bot user-agent [redacted] from 34.53.42.173 (US/United States/173.42.53.34.bc.googleus ...
show more
(badbots) Bad bot user-agent [redacted] from 34.53.42.173 (US/United States/173.42.53.34.bc.googleusercontent.com)
show less
Hacking
