🇨🇦
SSH-Admin
2025-11-01 19:15:34
UTC ·
(1 year ago)
Probing for Exploits
Exploited Host
Web App Attack
🇩🇪
Vegascosmetics
2025-10-25 21:52:11
UTC ·
(1 year ago)
Kingcopy(AI-IDS): IP is wandering around the site and acting suspiciously.
Bad Web Bot
🇳🇱
JCB
2025-10-25 08:20:00
UTC ·
(1 year ago)
34.1.27.139 - - [25/Oct/2025:06:05:59 +0300] "GET /app/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [25/Oct/2025:06:05:59 +0300] "GET / ...
show more
34.1.27.139 - - [25/Oct/2025:06:05:59 +0300] "GET /app/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [25/Oct/2025:06:05:59 +0300] "GET /login/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
show less
Web App Attack
🇳🇱
Site.eu
2025-10-25 00:30:51
UTC ·
(1 year ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
mygcode.de
2025-10-24 23:17:19
UTC ·
(1 year ago)
Scanning for Exploits
Bad Web Bot
🇩🇪
findlab
2025-10-24 23:00:02
UTC ·
(1 year ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇺🇸
Jason Howell
2025-10-24 22:22:24
UTC ·
(1 year ago)
34.1.27.139 - - [24/Oct/2025:17:21:40 -0500] "GET /wp-login.php HTTP/1.1" 200 2839 "http://en.gannonpool.com/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - ...
show more
34.1.27.139 - - [24/Oct/2025:17:21:40 -0500] "GET /wp-login.php HTTP/1.1" 200 2839 "http://en.gannonpool.com/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [24/Oct/2025:17:21:42 -0500] "GET /wp-login.php HTTP/1.1" 200 2865 "https://gannonpool.com/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [24/Oct/2025:17:21:44 -0500] "GET /wp-login.php HTTP/1.1" 200 2868 "https://www.gannonpool.com/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [24/Oct/2025:17:22:22 -0500] "GET /wp-login.php HTTP/1.1" 200 2868 "https://www.gannonpool.com/login/" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
34.1.27.139 - - [24/Oct/2025:17:22:24 -0500] "GET
...
show less
Web App Attack
🇺🇸
MPL
2025-10-24 19:56:11
UTC ·
(1 year ago)
tcp/80 (28 or more attempts)
Port Scan
🇺🇸
MPL
2025-10-24 19:56:11
UTC ·
(1 year ago)
tcp/80 (28 or more attempts)
Port Scan
🇫🇷
COMAITE
2025-10-24 19:39:49
UTC ·
(1 year ago)
Multiple web server 400 error codes from same source ip 34.1.27.139.
Web App Attack
🇳🇱
thedreamer.nl
2025-10-24 19:29:06
UTC ·
(1 year ago)
34.1.27.139 - - [24/Oct/2025:21:28:15 +0200] "GET /app/ HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610"
34.1.27.139 - ...
show more
34.1.27.139 - - [24/Oct/2025:21:28:15 +0200] "GET /app/ HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610"
34.1.27.139 - - [24/Oct/2025:21:28:15 +0200] "GET /login/ HTTP/2.0" 404 14 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610"
34.1.27.139 - - [24/Oct/2025:21:28:44 +0200] "GET /app/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610"
34.1.27.139 - - [24/Oct/2025:21:28:44 +0200] "GET /login/ HTTP/2.0" 404 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36" "US" "Columbus" "39.96250" "-83.00610"
...
show less
Brute-Force
Bad Web Bot
🇧🇾
lns.bz
2025-10-24 19:06:04
UTC ·
(1 year ago)
Too many 404 requests [BY]
Web App Attack
🇧🇷
leolemos
2025-10-24 19:04:03
UTC ·
(1 year ago)
[Fri Oct 24 09:17:40.920371 2025] [authz_core:error] [pid 2455878:tid 274474064474304] [client 34.1.27.139:0] AH01630: client denied by server configuration: [redacted][redacted]/sites/index.php
[Fri Oct 24 09:17:40.921543 2025] [authz_core:error] [p ...
show more
[Fri Oct 24 09:17:40.920371 2025] [authz_core:error] [pid 2455878:tid 274474064474304] [client 34.1.27.139:0] AH01630: client denied by server configuration: [redacted][redacted]/sites/index.php
[Fri Oct 24 09:17:40.921543 2025] [authz_core:error] [pid 2455878:tid 274474064474304] [client 34.1.27.139:0] AH01630: client denied by server configuration: [redacted][redacted]/sites/index.php
[Fri Oct 24 16:04:02.657818 2025] [authz_core:error] [pid 2674880:tid 274473886937280] [client 34.1.27.139:0] AH01630: client denied by server configuration: [redacted][redacted]/sites/index.php
show less
Brute-Force
🇳🇱
Savvii
2025-10-24 18:43:27
UTC ·
(1 year ago)
15 attempts against mh-modsecurity-ban on cedar
Brute-Force
Web App Attack
🇬🇧
myintarweb
2025-10-24 18:26:04
UTC ·
(1 year ago)
34.1.27.139 - - [24/Oct/2025:19:26:04 +0100] 443 "GET /login/ HTTP/2.0" 404 315 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
Hacking
Bad Web Bot
Web App Attack