🇳🇱
Site.eu
2026-10-17 02:09:06
(53 minutes ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 22:10:16
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.124.179.4 (4.179.124.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.179.4 (4.179.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 18:10:09.205735 2026] [security2:error] [pid 25854:tid 25854] [client 34.124.179.4:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hvacs-aircon.com"] [uri "/images../.env"] [unique_id "atKgwdYv6bxYzuJ9pOwAHwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
svr
2026-10-16 19:18:39
(7 hours ago)
Abusive Automated Web Scanner
Web App Attack
🇳🇱
Site.eu
2026-10-16 16:39:58
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 07:39:37
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.124.179.4 (4.179.124.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.179.4 (4.179.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:39:29.285949 2026] [security2:error] [pid 2351:tid 2351] [client 34.124.179.4:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.assistguide.net"] [uri "/.env.supabase"] [unique_id "atHUsa_1WafdyqkyFK39pQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-16 06:28:16
(20 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇳🇱
WeCloudit-Anti-Abuse
2026-10-16 04:57:12
(22 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
2026-10-16 04:26:02
(22 hours ago)
Bot / scanning and/or hacking attempts: GET /docs HTTP/2.0, GET /admin/users HTTP/2.0, POST /graphql ...
show more
Bot / scanning and/or hacking attempts: GET /docs HTTP/2.0, GET /admin/users HTTP/2.0, POST /graphql HTTP/2.0, GET /api-keys HTTP/2.0, GET /manage HTTP/2.0, GET /members HTTP/2.0, GET /ro40eg493zt535zau3k3 HTTP/2.0, GET /analytics HTTP/2.0, GET /checkout HTTP/2.0, GET /swagger HTTP/2.0, POST /_next HTTP/2.0, GET /chat HTTP/2.0, GET /users HTTP/2.0, GET /settings/api-keys HTTP/2.0, GET /internal HTTP/2.0, GET /webhooks HTTP/2.0
show less
Hacking
Web App Attack
🇩🇪
LRob
2026-10-16 02:49:52
(1 day ago)
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perpl ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0 (+11 more) | path: /i73t8dg77j4xmh3rwptl, /o7681mx7qmydyix6s21s, /dist/manifest.json (+17 more)
show less
Bad Web Bot
🇪🇸
robotstxt
2026-10-16 02:33:39
(1 day ago)
34.124.179.4 - - [16/Oct/2026:02:33:03 +0000] "GET /robots.txt HTTP/2.0" 403 134 "https://starship.x ...
show more
34.124.179.4 - - [16/Oct/2026:02:33:03 +0000] "GET /robots.txt HTTP/2.0" 403 134 "https://starship.xyz/robots.txt" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="34.124.179.4"
34.124.179.4 - - [16/Oct/2026:02:33:05 +0000] "GET /z9x8c7v6b5-debug-trigger-starship.xyz HTTP/2.0" 403 20 "https://starship.xyz/z9x8c7v6b5-debug-trigger-starship.xyz" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="34.124.179.4"
34.124.179.4 - - [16/Oct/2026:02:33:05 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 2 "https://starship.xyz/dist/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.124.179.4"
34.124.179.4 - - [16/Oct/2026:02:33:05 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "https://starship.xyz/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) Apple
...
show less
Web App Attack
🇩🇪
Skyrider
2026-10-16 01:52:54
(1 day ago)
crowdsecurity/http-probing
Web App Attack
🇮🇹
VHosting
2026-10-16 01:50:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-10-15 23:27:40
(1 day ago)
34.124.179.4 - - [15/Oct/2026:23:27:37 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/en ...
show more
34.124.179.4 - - [15/Oct/2026:23:27:37 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.124.179.4"
34.124.179.4 - - [15/Oct/2026:23:27:38 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.124.179.4"
34.124.179.4 - - [15/Oct/2026:23:27:38 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.124.179.4"
34.124.179.4 - - [15/Oct/2026:23:27:38 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.124.179.4"
34.124.179.4 - - [15/Oct/2026:23:27:38 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.124.179.4"
...
show less
Web Spam
Web App Attack
🇦🇺
2000cn.com.au
2026-10-15 22:36:23
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
2026-10-15 21:56:03
(1 day ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack