🇩🇪
Vegascosmetics
2026-10-20 10:20:14
(1 week ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB repu ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 77>=65, Abuse 84, NonEU, first-seen)
show less
Hacking
Exploited Host
Web App Attack
2026-10-20 08:11:04
(1 week ago)
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /%2Fsettings HTTP/2.0" 404 366
34.39.175.29 - - [ ...
show more
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /%2Fsettings HTTP/2.0" 404 366
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /%2Fapi/config HTTP/2.0" 404 366
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /static/manifest.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /dist/manifest.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /assets/manifest.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /webpack-stats.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /asset-manifest.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /manifest.json HTTP/2.0" 404 13194
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "POST /graphql HTTP/2.0" 404 12546
34.39.175.29 - - [20/Oct/2026:10:10:59 +0200] "GET /values.yaml HTTP/2.0" 404 13197
...
show less
Web Spam
Web App Attack
2026-10-20 08:04:38
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇬🇧
consul.to
2026-10-20 07:56:33
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
masterguru
2026-10-20 06:50:30
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:user-agent. (1100 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:user-agent. (1100000-169)
show less
Bad Web Bot
🇺🇸
iwle
2026-10-20 06:43:57
(1 week ago)
[Tue Oct 20 02:43:54.944226 2026] [:error] [pid 2065397:tid 2065505] [client 34.39.175.29:0] [client ...
show more
[Tue Oct 20 02:43:54.944226 2026] [:error] [pid 2065397:tid 2065505] [client 34.39.175.29:0] [client 34.39.175.29] ModSecurity: Warning. Matched phrase ".gitlab-ci.yml" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .gitlab-ci.yml found within REQUEST_FILENAME: /.gitlab-ci.yml"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "mail.uvscards.com"] [uri "/.gitlab-ci.yml"] [unique_id "atcNqpBNqk8UfjK4wmBhdgAAAEg"]
[Tue Oct 20 02:43:54.982811 2026] [:error] [pid 2065396:tid 2065468] [client 34.39.175.29:0] [client 34.39.175.29] ModSecurity: Warning. Matched phrase "Dockerfile" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-9
...
show less
Web App Attack
Brute-Force
2026-10-20 05:49:56
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
Marc
2026-10-20 05:11:59
(1 week ago)
34.39.175.29 - - [20/Oct/2026:07:11:58 +0200] "GET /forgot-password HTTP/2.0" 404 291 "-" "Mozilla/5 ...
show more
34.39.175.29 - - [20/Oct/2026:07:11:58 +0200] "GET /forgot-password HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.39.175.29 - - [20/Oct/2026:07:11:58 +0200] "GET /auth/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.39.175.29 - - [20/Oct/2026:07:11:58 +0200] "GET /secure HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force
🇩🇪
ut-addicted.com
2026-10-20 05:10:46
(1 week ago)
\[Tue Oct 20 07:10:44.409244 2026\] \[:error\] \[pid 16530:tid 140352514119424\] \[client 34.39.175. ...
show more
\[Tue Oct 20 07:10:44.409244 2026\] \[:error\] \[pid 16530:tid 140352514119424\] \[client 34.39.175.29:39298\] \[client 34.39.175.29\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 15\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "mail.ut-addicted.com"\] \[uri "/"\] \[unique_id "atb31CqpDbuemEw48xwX2gAAAIs"\]
show less
Brute-Force
Web App Attack
🇩🇪
Lennart Kramer
2026-10-19 12:25:21
(1 week ago)
Restricted File Access Attempt | Matched phrase "*env*" at /.env.supabase | Mozilla/5.0 AppleWebKit/ ...
show more
Restricted File Access Attempt | Matched phrase "*env*" at /.env.supabase | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 08:46:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.39.175.29 (29.175.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.175.29 (29.175.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:46:46.502410 2026] [security2:error] [pid 11068:tid 11068] [client 34.39.175.29:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "local639.com"] [uri "/.git/config"] [unique_id "atCS9hUIHNp1xj5GYNh36gAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-10-15 06:41:39
(1 week ago)
34.39.175.29 - - [15/Oct/2026:09:41:34 +0300] "GET /.git/config HTTP/2.0" 404 22511 "-" "Mozilla/5.0 ...
show more
34.39.175.29 - - [15/Oct/2026:09:41:34 +0300] "GET /.git/config HTTP/2.0" 404 22511 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.175.29 - - [15/Oct/2026:09:41:38 +0300] "GET /.env.local HTTP/2.0" 404 22511 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
Mundo Bueno
2026-10-15 04:05:29
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env.development [RATE LIMITED - 1800s quarantine] | Pa ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /.env.development [RATE LIMITED - 1800s quarantine] | Pays: BR | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-14 23:24:04
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇵🇱
lns.bz
2026-10-14 22:47:54
(1 week ago)
Too many 404 requests [BY]
Web App Attack