🇳🇱
Site.eu
2026-09-23 07:23:29
(9 hours ago)
Excessive multi-domain requests
Brute-Force
🇮🇳
evicky2002
2026-09-23 06:00:01
(11 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇧🇪
taivas.nl
2026-09-23 04:33:03
(12 hours ago)
Many_bad_calls
Web App Attack
🇳🇱
Savvii
2026-09-23 02:22:19
(14 hours ago)
20 attempts against mh-misbehave-ban on chive
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-23 01:48:37
(15 hours ago)
32 attempts against mh-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
pixelXp
2026-09-23 00:05:54
(17 hours ago)
Reason:10 (Web Spam), Via: bredasculptuur.nl/api, Message: detectSuspiciousPost count:1 details: Arr ...
show more
Reason:10 (Web Spam), Via: bredasculptuur.nl/api, Message: detectSuspiciousPost count:1 details: Array -
show less
Web Spam
🇵🇱
miriks
2026-09-22 23:47:42
(17 hours ago)
Automated scan detected: POST /graphql — UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
Automated scan detected: POST /graphql — UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
show less
Port Scan
Web App Attack
🇳🇱
melroy89
2026-09-22 23:27:29
(17 hours ago)
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Linux; Andro ...
show more
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "cryptoterminal.nl" 0.000
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "POST / HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "cryptoterminal.nl" 0.000
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "GET /ejgrpgjg9qtc2au1mpit HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "cryptoterminal.nl" 0.000
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "GET /z9x8c7v6b5-debug-trigger-cryptoterminal.nl HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "cryptoterminal.nl" 0.000
34.10.234.62 - - [23/Sep/2026:01:27:23 +0200] "POST /api HTTP/1.1" 403 9 "-" "Mozilla/5
...
show less
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-22 23:19:32
(17 hours ago)
(modsecurity) srv104 ModSecurity 34.10.234.62 (US/United States/62.234.10.34.bc.googleusercontent.co ...
show more
(modsecurity) srv104 ModSecurity 34.10.234.62 (US/United States/62.234.10.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
Skyrider
2026-09-22 23:19:27
(17 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇳🇱
mieg
2026-09-22 22:48:56
(18 hours ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 22:41:32
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.10.234.62 (62.234.10.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.10.234.62 (62.234.10.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 18:41:26.873808 2026] [security2:error] [pid 21111:tid 21111] [client 34.10.234.62:33818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "egelfitness.nl"] [uri "/_nuxt/../.env"] [unique_id "arMEFvFmFnCEoWNNklKsCgAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Eric
2026-09-22 22:23:31
(18 hours ago)
[Tue Sep 22 22:23:30.421811 2026] [security2:error] [pid 3273805:tid 3273805] [client 34.10.234.62:3 ...
show more
[Tue Sep 22 22:23:30.421811 2026] [security2:error] [pid 3273805:tid 3273805] [client 34.10.234.62:34710] [client 34.10.234.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/"] [unique_id "arL_4hemczPps7VZLHabHQAAACs"]
[Tue Sep 22 22:23:30.660085 2026] [security2:error] [pid 3273741:tid 3273741] [client 34.10.234.62:34716] [client 34.10.234.62] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [severity "CRI
...
show less
Hacking
Web App Attack
2026-09-22 22:05:24
(19 hours ago)
Trapped by Fail2Ban: Too many login failures from 34.10.234.62
Brute-Force
Hacking
🇳🇱
Savvii
2026-09-22 21:59:13
(19 hours ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack