🇪🇸
pipeline.es
2026-09-29 10:14:59
(9 minutes ago)
Web scanning / probing for vulnerable paths | URL: /console | Evidence: 34.140.254.164 - - [29/Sep/2 ...
show more
Web scanning / probing for vulnerable paths | URL: /console | Evidence: 34.140.254.164 - - [29/Sep/2026:12:14:13 +0200] \"GET /console HTTP/1.1\" 403 199 \"-\" \"Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
🇩🇪
MusicLibrary
2026-09-29 10:01:18
(23 minutes ago)
Probing foreign-stack admin panels / known exploit paths (Joomla, phpMyAdmin, phpunit, OWA, etc.)
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-29 06:40:49
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
updown.io
2026-09-29 03:57:11
(6 hours ago)
{"level":"info","ts":1790654231.2102668,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1790654231.2102668,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.140.254.164","remote_port":"53318","client_ip":"34.140.254.164","proto":"HTTP/2.0","method":"GET","host":"2jwr.status.updown.io","uri":"/.env","headers":{"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"2jwr.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000171437,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790654231.2325616,"logger":"
...
show less
DDoS Attack
Web App Attack
🇪🇸
pipeline.es
2026-09-28 10:04:01
(1 day ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
🇳🇱
Site.eu
2026-09-28 04:24:30
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇪🇸
pipeline.es
2026-09-28 03:16:07
(1 day ago)
Web scanning / probing for vulnerable paths | URL: /uploads../.env | Evidence: 34.140.254.164 - - [2 ...
show more
Web scanning / probing for vulnerable paths | URL: /uploads../.env | Evidence: 34.140.254.164 - - [28/Sep/2026:05:15:28 +0200] \"GET /uploads../.env HTTP/1.1\" 404 196 \"-\" \"Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
🇫🇷
simpletech.si
2026-09-28 03:09:16
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.140.254.164 (BE/Belgium/164.254.140. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.140.254.164 (BE/Belgium/164.254.140.34.bc.googleusercontent.com)
show less
SQL Injection
🇬🇧
consul.to
2026-09-28 01:04:14
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
ConsulHosting
2026-09-27 15:03:58
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
MBombeck
2026-09-27 14:12:45
(1 day ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇧🇪
cmbplf
2026-09-26 03:26:56
(3 days ago)
554 requests with url.path *.env
137 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇪🇸
pipeline.es
2026-09-26 02:17:25
(3 days ago)
Web scanning / probing for vulnerable paths | URL: /@fs/.env?raw&url?? | Evidence: 34.140.254.164 - ...
show more
Web scanning / probing for vulnerable paths | URL: /@fs/.env?raw&url?? | Evidence: 34.140.254.164 - - [26/Sep/2026:04:17:12 +0200] \"GET /@fs/.env?raw&url?? HTTP/1.1\" 404 196 \"-\" \"Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-25 23:08:23
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.140.254.164 (164.254.140.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.140.254.164 (164.254.140.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 19:08:16.766003 2026] [security2:error] [pid 21858:tid 21858] [client 34.140.254.164:46846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/Web.config" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.smartpost.ws"] [uri "/web.config"] [unique_id "arb-4KYOPPUmnX0Jpr9haQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇷
bubausluge
2026-09-25 20:58:18
(3 days ago)
Blocked by https://aegis.hr — Scraper / lazni bot (krivotvoreni UA) - (MITRE T1595), 89 attempts, Pe ...
show more
Blocked by https://aegis.hr — Scraper / lazni bot (krivotvoreni UA) - (MITRE T1595), 89 attempts, Period: 2026-09-25T20:56:52 to 2026-09-25T20:56:52
show less
Brute-Force
