🇸🇬
securejdprop
2026-06-12 02:47:27
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🔔 Many TCP/SYN ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🔔 Many TCP/SYN - Possible Masscan Network Service Discovery 🥷 - T1046). Ip 34.32.81.241 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-12 02:47:25.586051204 +0000 UTC
show less
Hacking
Web App Attack
🇮🇹
Inartis
2026-06-12 01:21:24
(1 week ago)
34.32.81.241 - - [12/Jun/2026:03:21:17 +0200] "GET /server/actuator/heapdump HTTP/1.1" 404 53961 "-" ...
show more
34.32.81.241 - - [12/Jun/2026:03:21:17 +0200] "GET /server/actuator/heapdump HTTP/1.1" 404 53961 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.25 Safari/537.36 Core/1.70.3722.400 QQBrowser/10.5.3739.400"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-11 18:47:15
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Cloud86 B.V.
2026-06-11 12:39:07
(1 week ago)
categories: DDoS Attack
DDoS Attack
🇧🇪
cmbplf
2026-06-11 07:41:06
(1 week ago)
926 limiting connections by zone (3h44m59s)
DDoS Attack
🇩🇪
raph
2026-06-11 06:45:05
(1 week ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-06-11 01:03:03
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
curiosity
2026-06-11 00:10:18
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
2026-06-10 23:53:08
(1 week ago)
(caddyscan) Scanner path probe from 34.32.81.241 (DE/Germany/241.81.32.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.32.81.241 (DE/Germany/241.81.32.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.32.81.241 - - [10/Jun/2026:23:53:04 +0000] "GET /v1/actuator/configprops HTTP/1.1"
[REDACTED] 200 2627 34.32.81.241 - - [10/Jun/2026:23:53:04 +0000] "GET /config/.aws/credentials HTTP/1.1"
[REDACTED] 200 2627 34.32.81.241 - - [10/Jun/2026:23:53:04 +0000] "GET /api/actuator/logfile HTTP/1.1"
[REDACTED] 200 2627 34.32.81.241 - - [10/Jun/2026:23:53:04 +0000] "GET /actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.32.81.241 - - [10/Jun/2026:23:53:04 +0000] "GET /v1/actuator/heapdump HTTP/1.1"
show less
Port Scan
🇳🇱
homeshowdomain.nl
2026-06-10 22:00:37
(1 week ago)
Auto-ban: >3000 req/min op 2026-06-10
Web App Attack
SSH
Hacking
🇨🇦
john doe
2026-06-10 19:41:48
(1 week ago)
SentinelBot: Spring Boot Exploit (score: 72)
Web App Attack
🇩🇪
updown.io
2026-06-10 19:01:29
(1 week ago)
{"level":"info","ts":1781118088.4621484,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781118088.4621484,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.32.81.241","remote_port":"48684","client_ip":"34.32.81.241","proto":"HTTP/1.1","method":"GET","host":"status.valuesoft.site","uri":"/trace","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 1.5; de-ch; HTC Hero Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.valuesoft.site","ech":false}},"bytes_read":0,"user_id":"","duration":0.000189422,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1781118088.4691007,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.32.81.241","remote_port":"48688","client_ip":"34.32.81.241","proto":"HTTP/1.1
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-10 18:40:29
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.32.81.241 (241.81.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.32.81.241 (241.81.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 14:40:23.200035 2026] [security2:error] [pid 7989:tid 7989] [client 34.32.81.241:54930] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||scrunchiebuttbikinis.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scrunchiebuttbikinis.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aimvl8FaJmZftRk1WdM3HAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-10 18:05:28
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 17:29:29
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.32.81.241 (241.81.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.32.81.241 (241.81.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 13:29:25.705120 2026] [security2:error] [pid 20500:tid 20500] [client 34.32.81.241:58184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||adults-biz.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "adults-biz.com"] [uri "/database.sql"] [unique_id "aime9Q3za71mZoHXWKovdAAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack