🇳🇱
homeshowdomain.nl
2026-11-03 22:59:24
UTC ·
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-02.
Web App Attack
SSH
Hacking
Anonymous
2026-11-03 12:03:08
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇳🇱
Eric
2026-11-02 23:28:56
UTC ·
(1 week ago)
[Mon Nov 02 23:28:55.827784 2026] [security2:error] [pid 1269177:tid 1269177] [client 34.178.5.108:0] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-c ...
show more
[Mon Nov 02 23:28:55.827784 2026] [security2:error] [pid 1269177:tid 1269177] [client 34.178.5.108:0] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "www.fambus.nl"] [uri "/.env.secret"] [unique_id "aukct8B1TwUmAnliYkfc6gAAAAE"]
[Mon Nov 02 23:28:55.998282 2026] [security2:error] [pid 1269173:tid 1269173] [client 34.178.5.108:0] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity
...
show less
Hacking
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-02 22:31:30
UTC ·
(1 week ago)
Modsecurity: probe or injection attempt
SQL Injection
Web App Attack
🇫🇷
masterguru
2026-11-02 21:36:58
UTC ·
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
🇳🇴
Abuse Buster
2026-11-02 21:04:30
UTC ·
(1 week ago)
34.178.5.108 - [02/Nov/2026:22:04:28 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.178.5.108 - [02/Nov/2026:22:04:28 +0100] "GET /assets/manifest.json HTTP/2.0" 404 1885 "-" "Mozi ...
show more
34.178.5.108 - [02/Nov/2026:22:04:28 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.178.5.108 - [02/Nov/2026:22:04:28 +0100] "GET /assets/manifest.json HTTP/2.0" 404 1885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.178.5.108 - [02/Nov/2026:22:04:28 +0100] "GET /z9x8c7v6b5-debug-trigger-www.wingthor.net HTTP/2.0" 404 1885 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-11-02 20:50:03
UTC ·
(1 week ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇩🇪
pscriptos
2026-11-02 18:54:52
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇳🇴
Abuse Buster
2026-11-02 17:39:20
UTC ·
(1 week ago)
34.178.5.108 - - [02/Nov/2026:18:39:18 +0100] "GET /robots.txt HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.178.5.108 - - [02/Nov/2026:18:39:18 +0100] "GET /sitemap.xml HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compat ...
show more
34.178.5.108 - - [02/Nov/2026:18:39:18 +0100] "GET /robots.txt HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.178.5.108 - - [02/Nov/2026:18:39:18 +0100] "GET /sitemap.xml HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.178.5.108 - - [02/Nov/2026:18:39:18 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 22 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Web App Attack
Anonymous
2026-11-02 17:02:56
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇲🇾
Rizzy
2026-11-02 16:25:34
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
Eric
2026-11-02 13:23:39
UTC ·
(1 week ago)
[Mon Nov 02 13:23:39.153884 2026] [security2:error] [pid 939300:tid 939300] [client 34.178.5.108:35274] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity ...
show more
[Mon Nov 02 13:23:39.153884 2026] [security2:error] [pid 939300:tid 939300] [client 34.178.5.108:35274] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "fambus.nl"] [uri "/uploads../.env"] [unique_id "auiO2zRZbtq8XY6WZ8mN6QAAACM"]
[Mon Nov 02 13:23:39.156240 2026] [security2:error] [pid 939295:tid 939295] [client 34.178.5.108:35260] [client 34.178.5.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [sever
...
show less
Hacking
Web App Attack
🇩🇪
updown.io
2026-11-02 12:54:28
UTC ·
(1 week ago)
{"level":"info","ts":1793624067.9296753,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.178.5.108","remote_port":"48796","client_ip":"34.178.5.108","proto":"HTTP/2.0","method":"GET","host":"faq7.status.updown.io","u ...
show more
{"level":"info","ts":1793624067.9296753,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.178.5.108","remote_port":"48796","client_ip":"34.178.5.108","proto":"HTTP/2.0","method":"GET","host":"faq7.status.updown.io","uri":"/media../.env","headers":{"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"faq7.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000127294,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":179362406
...
show less
DDoS Attack
Web App Attack
🇧🇪
cmbplf
2026-11-02 12:19:39
UTC ·
(1 week ago)
4.309 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
Anonymous
2026-11-02 12:08:17
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking