🇺🇸
MPL
2026-06-11 17:39:11
(1 week ago)
tcp/443 (30 or more attempts)
Port Scan
🇬🇧
consul.to
2026-06-11 11:04:20
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
2026-06-11 10:09:28
(1 week ago)
34.12.53.198 - - [11/Jun/2026:07:09:27 -0300] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 870 "-" "Mo ...
show more
34.12.53.198 - - [11/Jun/2026:07:09:27 -0300] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 870 "-" "Mozilla/5.0 (Linux; Android 7.0; LG-H850) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
34.12.53.198 - - [11/Jun/2026:07:09:27 -0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 870 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.4 Safari/537.36"
34.12.53.198 - - [11/Jun/2026:07:09:27 -0300] "GET /wp-json/gravitysmtp/v1/config HTTP/1.1" 404 870 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Maxthon/4.4.6.1000 Chrome/30.0.1599.101 Safari/537.36"
...
show less
Port Scan
🇬🇧
WebNiraj
2026-06-10 23:47:35
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.12.53.198 (NL/The Netherlands/198.53.12.34.b ...
show more
(mod_security) mod_security (id:949110) triggered by 34.12.53.198 (NL/The Netherlands/198.53.12.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
🇬🇧
consul.to
2026-06-10 08:43:42
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Viveronese
2026-06-10 07:18:32
(1 week ago)
HTTP vulnerability scanning
Web App Attack
🇩🇪
bescared
2026-06-10 01:27:56
(1 week ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
2026-06-09 11:53:44
(1 week ago)
34.12.53.198 - - [09/Jun/2026:11:53:43 +0000] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 2769 "-" "M ...
show more
34.12.53.198 - - [09/Jun/2026:11:53:43 +0000] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 2769 "-" "Mozilla/5.0 (Windows NT 6.1; Win64; rv:68.0) Gecko/20100101 Firefox/68.0"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-06-09 10:50:54
(1 week ago)
[TueJun0912:50:50.3286832026][security2:error][pid699618:tid700023][client34.12.53.198:0]ModSecurity ...
show more
[TueJun0912:50:50.3286832026][security2:error][pid699618:tid700023][client34.12.53.198:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"probuild.ch\"][uri\"/wp-json/gravitysmtp/v1/settings\"][unique_id\"aifwCuML07NGAheXZoWYJQAAAMU\"]
show less
Hacking
Web App Attack
2026-06-09 06:23:05
(1 week ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-json/gravitysmtp/v1/tests/mock-data
Web App Attack
🇩🇪
Nevermind
2026-06-09 06:11:16
(1 week ago)
34.12.53.198 - - [09/Jun/2026:08:11:15 +0200] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 6312 "-" "M ...
show more
34.12.53.198 - - [09/Jun/2026:08:11:15 +0200] "GET /wp-json/wp/v2/settings HTTP/1.1" 404 6312 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3872.0 Safari/537.36 Edg/78.0.244.0"
34.12.53.198 - - [09/Jun/2026:08:11:15 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 6312 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2623.87 Safari/537.36"
34.12.53.198 - - [09/Jun/2026:08:11:15 +0200] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 404 6312 "-" "Mozilla/5.0 (Linux; Android 9; POT-LX1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.89 Mobile Safari/537.36"
34.12.53.198 - - [09/Jun/2026:08:11:15 +0200] "GET /wp-json/gravitysmtp/v1/tests/mock-data HTTP/1.1" 404 6312 "-" "SEC-SGHX820/1.0 NetFront/3.2 Profile/MIDP-2.0 Configuration/CLDC-1.1"
...
show less
Web App Attack
🇨🇭
backslash
2026-06-09 06:03:00
(1 week ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
🇩🇪
SCHAPPY
2026-06-09 04:17:26
(1 week ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
🇬🇧
consul.to
2026-06-09 01:42:53
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
mnsf
2026-06-09 00:22:00
(1 week ago)
Too many Status 40X (15)
Brute-Force
Web App Attack