🇳🇱
Site.eu
2026-10-14 03:20:25
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
masterguru
2026-10-14 02:59:08
UTC ·
(1 month ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇧🇪
cmbplf
2026-10-14 02:22:17
UTC ·
(1 month ago)
724 requests with url.path *.env
155 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇫🇷
masterguru
2026-10-14 01:25:19
UTC ·
(1 month ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.151.221.84 (BR/Brazil/84.221.151.34.bc.googleusercontent.com): 2 in the last 3600 secs (0-196)
Hacking
🇫🇷
COMAITE
2026-10-14 01:22:58
UTC ·
(1 month ago)
Common web attack from 34.151.221.84.
Web App Attack
🇺🇸
mnsf
2026-10-14 00:05:38
UTC ·
(1 month ago)
Too many Status 40X (13)
Request Overload (105)
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-10-13 23:05:01
UTC ·
(1 month ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-13 22:47:49
UTC ·
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-13 21:11:24
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.151.221.84 (84.221.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:11:20.273461 2026] [security2:error] [pid 27113:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.151.221.84 (84.221.151.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 17:11:20.273461 2026] [security2:error] [pid 27113:tid 27113] [client 34.151.221.84:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail-pmg.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail-pmg.com"] [uri "/z9x8c7v6b5-debug-trigger-mail-pmg.com"] [unique_id "as6eeKgtKU2K5Sy3fw4gQQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-10-13 20:43:26
UTC ·
(1 month ago)
34.151.221.84 - - [13/Oct/2026:16:43:26 -0400] "GET /js../.env HTTP/1.1" 404 5714 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.151.221.84 - - [13/Oct/2026:16:43:26 -0400] "GET /files../.env HTTP/1.1" 404 5714 "-" "Mozilla/5.0 A ...
show more
34.151.221.84 - - [13/Oct/2026:16:43:26 -0400] "GET /js../.env HTTP/1.1" 404 5714 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.151.221.84 - - [13/Oct/2026:16:43:26 -0400] "GET /files../.env HTTP/1.1" 404 5714 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.151.221.84 - - [13/Oct/2026:16:43:26 -0400] "GET /public../.env HTTP/1.1" 404 5714 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
🇩🇪
LRob
2026-10-13 19:25:25
UTC ·
(1 month ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) (+8 more) | path: / ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/), Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) (+8 more) | path: /.npmrc, /.htpasswd, /credentials.json (+9 more)
show less
Bad Web Bot
🇳🇱
ConsulHosting
2026-10-13 15:04:49
UTC ·
(1 month ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇪🇸
pipeline.es
2026-10-13 14:49:16
UTC ·
(1 month ago)
Web scanning / probing for vulnerable paths | URL: /cms/.env | Evidence: portadembarque.com 34.151.221.84 - - [13/Oct/2026:16:48:01 +0200] \"GET /cms/.env HTTP/2.0\" 404 21112 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Cla ...
show more
Web scanning / probing for vulnerable paths | URL: /cms/.env | Evidence: portadembarque.com 34.151.221.84 - - [13/Oct/2026:16:48:01 +0200] \"GET /cms/.env HTTP/2.0\" 404 21112 \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email])\" GEOIP_COUNTRY_CODE=BR 33083 | ASN: GOOGLE-CLOUD-PLATFORM | Country: BR
show less
Port Scan
Web App Attack
🇮🇹
VHosting
2026-10-13 14:20:04
UTC ·
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
Hary74656
2026-10-13 14:18:48
UTC ·
(1 month ago)
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
Kit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
[client 34.151.221.84] [realclient 34.151.221.84] - - [13/Oct/2026:16:18:48 +0200] [vhos ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-404, failures=30.
[earlier text truncated]
Kit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
[client 34.151.221.84] [realclient 34.151.221.84] - - [13/Oct/2026:16:18:48 +0200] [vhost schani.hostmi.at] "GET /members HTTP/2.0" 404 325 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
[client 34.151.221.84] [realclient 34.151.221.84] - - [13/Oct/2026:16:18:48 +0200] [vhost schani.hostmi.at] "GET /register HTTP/2.0" 404 325 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
[client 34.151.221.84] [realclient 34.151.221.84] - - [13/Oct/2026:16:18:48 +0200] [vhost schani.hostmi.at] "GET /admin/users HTTP/2.0" 404 325 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
Web App Attack
