Anonymous
2026-11-09 17:58:26
UTC ·
(1 day ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇺🇸
jormaster3k
2026-11-06 07:06:30
UTC ·
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇬
lendsqr
2026-11-06 06:14:36
UTC ·
(4 days ago)
Automated attack on our web servers: asked for 31 secret-file paths. Blocked.
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-06 06:07:05
UTC ·
(4 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.32.240.161 (NL/The Netherlands/161.240.32.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.32.240.161 - - [06/Nov/202 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.32.240.161 (NL/The Netherlands/161.240.32.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.32.240.161 - - [06/Nov/2026:07:07:03 +0100] "GET /.aws/credentials%3F.txt HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "192.168.226.88,34.32.240.161" host=olscitaly.com
show less
Port Scan
🇺🇸
kosada.com
2026-11-06 05:24:42
UTC ·
(4 days ago)
Repeated requests for suspicious nonexistent URLs, for example: /proc/self/cgroup (HTTP/2.0 port 443, user agent: "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)")
Web App Attack
🇳🇱
ConsulHosting
2026-11-06 04:55:10
UTC ·
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇹🇷
Jova
2026-11-06 04:15:07
UTC ·
(4 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇧🇪
cmbplf
2026-11-06 03:33:25
UTC ·
(4 days ago)
184 requests with url.path *credentials.json
143 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-06 03:01:14
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.32.240.161 (161.240.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:01:08.614626 2026] [security2:error] [pid 27325:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.240.161 (161.240.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:01:08.614626 2026] [security2:error] [pid 27325:tid 27325] [client 34.32.240.161:38362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whm.naturalunfinishedfurniture.com"] [uri "/.env.production.local"] [unique_id "au1C9DUAfznV3WQzECdjhwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 02:04:59
UTC ·
(5 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
Anonymous
2026-11-06 01:00:15
UTC ·
(5 days ago)
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /build/manifest.json HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /gt6lbkjxaja9id05xydp HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /z9x8c7v6b5 ...
show more
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /build/manifest.json HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /gt6lbkjxaja9id05xydp HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /dist/manifest.json HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /ngsw.json HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:01 +0100] "GET /d8m1hhp4jreyzdyzdcsu HTTP/1.1" 404 30261
34.32.240.161 - - [06/Nov/2026:02:00:06 +0100] "GET /laravel../config/database.php HTTP/1.1" 404 29624
34.32.240.161 - - [06/Nov/2026:02:00:06 +0100] "POST /graphql HTTP/1.1" 404 29624
34.32.240.161 - - [06/Nov/2026:02:00:07 +0100] "GET /proc/self/environ%3F.js HTTP/1.1" 404 30261
...
show less
Web Spam
Web App Attack
🇩🇪
maxpower
2026-11-06 00:28:02
UTC ·
(5 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.32.240.161 (NL/The Netherlands/161.240.32.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.32.240.161 - - [06/Nov/202 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.32.240.161 (NL/The Netherlands/161.240.32.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.32.240.161 - - [06/Nov/2026:01:28:01 +0100] "GET /config/env/aws_credentials.env HTTP/2.0" 429 41 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "192.168.197.96,34.32.240.161" host=www.olscitaly.com
show less
Port Scan
Anonymous
2026-11-06 00:18:15
UTC ·
(5 days ago)
[Thu Nov 05 20:17:29.454847 2026] [authz_core:error] [pid 63787:tid 63843] [remote 34.32.240.161:51644] AH01630: client denied by server configuration: /shr/sdb1/WebDev/Infrastructure/LOC-Chatbot/public/
[Thu Nov 05 20:17:30.139409 2026] [authz_core: ...
show more
[Thu Nov 05 20:17:29.454847 2026] [authz_core:error] [pid 63787:tid 63843] [remote 34.32.240.161:51644] AH01630: client denied by server configuration: /shr/sdb1/WebDev/Infrastructure/LOC-Chatbot/public/
[Thu Nov 05 20:17:30.139409 2026] [authz_core:error] [pid 63787:tid 63822] [remote 34.32.240.161:51644] AH01630: client denied by server configuration: /shr/sdb1/WebDev/Infrastructure/LOC-Chatbot/public/robots.txt
[Thu Nov 05 20:17:31.020337 2026] [authz_core:error] [pid 63787:tid 63850] [remote 34.32.240.161:51644] AH01630: client denied by server configuration: /shr/sdb1/WebDev/Infrastructure/LOC-Chatbot/public/sitemap.xml
[Thu Nov 05 20:17:31.666907 2026] [authz_core:error] [pid 63787:tid 63851] [remote 34.32.240.161:51644] AH01630: client denied by server configuration: /shr/sdb1/WebDev/Infrastructure/LOC-Chatbot/public/sitemap_index.xml
[Thu Nov 05 20:17:31.967287 2026] [authz_core:error] [pid 63787:tid 63848] [remote 34.32.240.161:51644] AH01630: client denied by server configura
...
show less
Brute-Force
Web App Attack
Anonymous
2026-11-05 23:59:43
UTC ·
(5 days ago)
Web application attack detected.
Web App Attack
Anonymous
2026-11-05 23:44:45
UTC ·
(5 days ago)
Aggressive web scan
Web App Attack