🇧🇪
taivas.nl
2026-10-08 04:32:51
(2 weeks ago)
Many_bad_calls
Web App Attack
🇫🇷
spongebob1234
2026-10-08 04:07:00
(2 weeks ago)
Wazuh SIEM: 12 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : ...
show more
Wazuh SIEM: 12 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Attaque / Requête Anormale), Web (Bad Bot / Scanner), Web (Bot d'indexation / Crawler), Web (Erreur 400 Bad Request), Web (Erreur 403 Interdit), Web (Erreur 404 Non Trouvé).
show less
Port Scan
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-10-08 03:28:36
(2 weeks ago)
"GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-08 01:53:15
(2 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.81.147.182 (182.147.81.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.81.147.182 (182.147.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 21:53:08.676838 2026] [security2:error] [pid 25527:tid 25541] [client 34.81.147.182:43618] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||blog.stonyp.com|F|2"] [data ".stonyp.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "blog.stonyp.com"] [uri "/z9x8c7v6b5-debug-trigger-blog.stonyp.com"] [unique_id "asb3hG9N3VK4DbtXzDd_3QAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-08 00:51:00
(2 weeks ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
🇸🇬
simpeg-adm.bandung.go.id
2026-10-08 00:42:45
(2 weeks ago)
08/Oct/2026:00:42:44 +0000;34.81.147.182;"/z9x8c7v6b5-debug-trigger-app.weddingworkflows.com"
08/Oct ...
show more
08/Oct/2026:00:42:44 +0000;34.81.147.182;"/z9x8c7v6b5-debug-trigger-app.weddingworkflows.com"
08/Oct/2026:00:42:44 +0000;34.81.147.182;"/3u4hc6h1mj7gy790cl7v"
08/Oct/2026:00:42:44 +0000;34.81.147.182;"/.vite/manifest.json"
08/Oct/2026:00:42:45 +0000;34.81.147.182;"/dist/.vite/manifest.json"
08/Oct/2026:00:42:45 +0000;34.81.147.182;"/dist/manifest.json"
08/Oct/2026:00:42:45 +0000;34.81.147.182;"/m1zyze1o4496uqag6ahx"
08/Oct/2026:00:42:45 +0000;34.81.147.182;"/lib/terminal-xhr.php"
...
show less
Web Spam
Brute-Force
Web App Attack
Anonymous
2026-10-08 00:20:18
(2 weeks ago)
Aggressive web scan
Web App Attack
🇩🇪
raph
2026-10-07 23:32:37
(2 weeks ago)
[LIB DIR] crawler /vendor/*, /node_modules/*, /laravel/*, etc.
Bad Web Bot
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-10-07 23:31:03
(2 weeks ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-10-07 22:53:18
(2 weeks ago)
34.81.147.182 - - [07/Oct/2026:22:52:58 +0000] "GET /z9x8c7v6b5-debug-trigger-xilas.es HTTP/2.0" 403 ...
show more
34.81.147.182 - - [07/Oct/2026:22:52:58 +0000] "GET /z9x8c7v6b5-debug-trigger-xilas.es HTTP/2.0" 403 30171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "-" edge="34.81.147.182"
34.81.147.182 - - [07/Oct/2026:22:52:59 +0000] "GET /assets/manifest.json HTTP/2.0" 403 29527 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.81.147.182"
34.81.147.182 - - [07/Oct/2026:22:52:59 +0000] "GET /static/manifest.json HTTP/2.0" 403 29527 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.81.147.182"
34.81.147.182 - - [07/Oct/2026:22:52:59 +0000] "GET /manifest.json HTTP/2.0" 403 29501 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.81.147.182"
34.81.147.182 - - [07/Oct/2026:22:52:59 +0000]
...
show less
Web App Attack
🇺🇸
ipblock.com
2026-10-07 22:50:00
(2 weeks ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇩🇪
palzer.IT
2026-10-07 22:42:59
(2 weeks ago)
Fail2ban automatic report for plesk-apache-badbot: 34.81.147.182 - - [08/Oct/2026:00:42:27 +0200] GE ...
show more
Fail2ban automatic report for plesk-apache-badbot: 34.81.147.182 - - [08/Oct/2026:00:42:27 +0200] GET /[DOMAIN_REMOVED] [DOMAIN_REMOVED] 303 6798 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +[DOMAIN_REMOVED]
show less
Bad Web Bot
🇫🇷
Batz
2026-10-07 22:34:41
(2 weeks ago)
Automated Web Bot hunting for hidden .env / AI API Credentials
Port Scan
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-10-07 22:30:40
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.81.147.182 (TW/Ta ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.81.147.182 (TW/Taiwan/182.147.81.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇧🇷
radardatelecom
2026-10-07 22:27:04
(2 weeks ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack