🇸🇬
securejdprop
2026-06-15 03:19:06
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🔔 Many TCP/SYN ...
show more
This IP was detected by CrowdSec triggering crowdsecurity/suricata-major-severity(🐾 - 🔔 Many TCP/SYN - Possible Masscan Network Service Discovery 🥷 - T1046). Ip 34.47.109.72 performed 'crowdsecurity/suricata-major-severity' (1 events over 0s) at 2026-06-15 03:19:04.593930132 +0000 UTC
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 01:51:00
(10 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:50:52.875649 2026] [security2:error] [pid 25326:tid 25326] [client 34.47.109.72:43128] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||pointandshootfilm.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "pointandshootfilm.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9afNNo7sc6kzD_kxMoegAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-06-15 00:36:35
(11 hours ago)
Aggressive web search of vulnerable pages: /api/docker-compose.yml /app/docker-compose.yml /api/dock ...
show more
Aggressive web search of vulnerable pages: /api/docker-compose.yml /app/docker-compose.yml /api/docker-compose.prod.yml /deploy/docker-compose. ...
show less
Web App Attack
🇫🇷
dynamix
2026-06-14 21:49:27
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 21:46:03
(14 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:45:58.703248 2026] [security2:error] [pid 30253:tid 30253] [client 34.47.109.72:35194] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.l3l4.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.l3l4.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai8hFlj4QbefnepdMSBJ4AAAAIY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Cloud86 B.V.
2026-06-14 20:52:04
(15 hours ago)
categories: DDoS Attack
DDoS Attack
🇺🇸
TPI-Abuse
2026-06-14 10:08:52
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.109.72 (72.109.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:08:44.570509 2026] [security2:error] [pid 31814:tid 31829] [client 34.47.109.72:53258] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.truckcandy.ceol.us|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.truckcandy.ceol.us"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai59rNaYsF4b0C8Lq3HXegAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
masterguru
2026-06-14 07:51:37
(1 day ago)
Restricted File Access Attempt. Matched phrase ".docker/" at REQUEST_FILENAME. (930130-169)
Hacking
Web App Attack
🇳🇱
debestelapp
2026-06-14 06:10:08
(1 day ago)
Web App Attack
🇬🇧
Axel
2026-06-14 03:12:07
(1 day ago)
Blocked by Fail2Ban. Flagged by jail plesk-apache-badbot | UK-01
Web App Attack
🇮🇹
VHosting
2026-06-14 02:55:03
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
tinect
2026-06-13 21:26:58
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking