🇫🇷
IRISIO
2026-11-09 10:25:53
UTC ·
(1 day ago)
scans/SQL injection/spam posts : 338 queries
Web App Attack
SQL Injection
2026-11-09 07:55:05
UTC ·
(1 day ago)
Aggressive web scan
Web App Attack
🇩🇪
konseptit
2026-11-09 05:46:13
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.79.168.207 (BE/Belgium/207.168.79.34.bc.googleusercontent.com)
SQL Injection
🇦🇺
nzhost.co.nz
2026-11-09 05:25:56
UTC ·
(1 day ago)
$f2bV_matches
Hacking
Brute-Force
🇩🇪
FD-IX
2026-11-09 04:54:22
UTC ·
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
auridh
2026-11-09 03:13:11
UTC ·
(1 day ago)
Ip 34.79.168.207 performed 'crowdsecurity/appsec-vpatch' (2 events over 4.817945471s) at 2026-11-09 03:13:10.369255915 +0000 UTC
Ip 34.79.168.207 performed 'crowdsecurity/http-crawl-non_statics' (51 events over 5.422579931s) at 2026-11-09 03:13:11.29 ...
show more
Ip 34.79.168.207 performed 'crowdsecurity/appsec-vpatch' (2 events over 4.817945471s) at 2026-11-09 03:13:10.369255915 +0000 UTC
Ip 34.79.168.207 performed 'crowdsecurity/http-crawl-non_statics' (51 events over 5.422579931s) at 2026-11-09 03:13:11.297908086 +0000 UTC
Ip 34.79.168.207 performed 'crowdsecurity/http-sensitive-files' (5 events over 306.565052ms) at 2026-11-09 03:13:06.181619103 +0000 UTC
WAF block: crowdsecurity/vpatch-env-access from 34.79.168.207 ([REDACTED]) (2 alerts)
WAF block: crowdsecurity/vpatch-git-config from 34.79.168.207 ([REDACTED]) (2 alerts)
show less
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-09 01:59:17
UTC ·
(1 day ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇧🇾
lns.bz
2026-11-08 16:05:02
UTC ·
(1 day ago)
.env scanning [BY]
Web App Attack
🇬🇧
consul.to
2026-11-08 15:08:32
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇪🇸
scaballe
2026-11-08 14:36:03
UTC ·
(2 days ago)
Web App Attack
2026-11-08 13:20:45
UTC ·
(2 days ago)
Blocked by Fail2Ban via ModSecurity OWASP Rules
...
Bad Web Bot
Web App Attack
🇳🇦
jacqueskruger
2026-11-08 08:32:53
UTC ·
(2 days ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-08T08:22:26Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-08T08:22:26Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
🇬🇷
setupgr
2026-11-08 07:55:08
UTC ·
(2 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.79.168.207 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:55:05.7737 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.79.168.207 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:55:05.773765 2026] [security2:error] [pid 11639:tid 11767] [client 34.79.168.207:57568] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 207.168.79.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "katogidimitsana.com"] [uri "/.env"] [unique_id "avAq2aeX-o37xGAWD9Nc5gAAAMg"]
show less
Port Scan
🇬🇷
setupgr
2026-11-08 05:06:40
UTC ·
(2 days ago)
(mod_security) mod_security (id:11000011) triggered by 34.79.168.207 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:06:36.1105 ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.79.168.207 (BE/Belgium/Brussels Capital/Brussels/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Nov 08 07:06:36.110562 2026] [security2:error] [pid 10894:tid 11401] [client 34.79.168.207:4094] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "140"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 207.168.79.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "mail.katogidimitsana.com"] [uri "/.env"] [unique_id "avADXI0kENaFDYArYie3MgAAA1U"]
show less
Port Scan
🇧🇪
cmbplf
2026-11-08 03:02:43
UTC ·
(2 days ago)
2.245 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
