🇳🇱
homeshowdomain.nl
2026-10-21 22:01:42
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-20.
show less
Web App Attack
SSH
Hacking
🇪🇸
elcruzado.es
2026-10-21 11:46:09
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.79.81.180 (BE/Bel ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.79.81.180 (BE/Belgium/180.81.79.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇫🇮
albionfreemarket.com
2026-10-21 11:42:04
(1 day ago)
34.79.81.180 - - [21/Oct/2026:11:42:02 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreema ...
show more
34.79.81.180 - - [21/Oct/2026:11:42:02 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "BE"
34.79.81.180 - - [21/Oct/2026:11:42:02 +0000] "POST /api/graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "BE"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-10-21 05:31:32
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
2026-10-21 05:19:59
(1 day ago)
Aggressive web scan
Web App Attack
🇧🇪
cmbplf
2026-10-21 03:29:11
(2 days ago)
1.248 requests with url.path */@fs/*
498 requests with url.path */proc/*
388 requests with url.pa ...
show more
1.248 requests with url.path */@fs/*
498 requests with url.path */proc/*
388 requests with url.path *.ssh/*
274 requests with url.path *credentials.json
265 requests with url.path *.aws/*
223 requests with url.path *config.json
116 requests with url.path *compose.yaml
111 requests with url.path *.config/*
109 requests with url.path *config.toml
102 requests with url.path *secrets.json
102 requests with url.path *.docker/*
101 requests with url.path *compose.yml
show less
Brute-Force
Bad Web Bot
🇫🇮
stinpriza
2026-10-21 03:27:30
(2 days ago)
Web App Attack
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-21 02:24:21
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-10-21 02:18:02
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.81.180 (180.81.79.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.81.180 (180.81.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 22:17:58.427924 2026] [security2:error] [pid 16303:tid 16303] [client 34.79.81.180:51218] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.grandviewlabradorretrievers.com.grandvistalabs.com|F|2"] [data ".grandviewlabradorretrievers.com.grandvistalabs.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.grandviewlabradorretrievers.com.grandvistalabs.com"] [uri "/z9x8c7v6b5-debug-trigger-www.grandviewlabradorretrievers.com.grandvistalabs.com"] [unique_id "atgg1hHC560542bBbr0FoAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Secure Gateway®️
2026-10-20 22:00:39
(2 days ago)
Report By Secure Gateway Security Team: Brute Force Login Attempt
SQL Injection
🇺🇸
ALSCO®️
2026-10-20 22:00:39
(2 days ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
Hacking
🇪🇸
pipeline.es
2026-10-20 17:28:06
(2 days ago)
Web scanning / probing for vulnerable paths | URL: /config/.env.dev | Evidence: microsites.grupoeuro ...
show more
Web scanning / probing for vulnerable paths | URL: /config/.env.dev | Evidence: microsites.grupoeuropa.com 34.79.81.180 - - [20/Oct/2026:19:26:42 +0200] \"GET /config/.env.dev HTTP/1.1\" 404 - \"-\" \"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot\" GEOIP_COUNTRY_CODE=BE | ASN: GOOGLE-CLOUD-PLATFORM | Country: BE
show less
Port Scan
Web App Attack
🇫🇮
oh.mg
2026-10-20 17:11:57
(2 days ago)
[Tue Oct 20 19:11:52.568464 2026] [security2:error] [pid 1914194:tid 1914205] [client 34.79.81.180:0 ...
show more
[Tue Oct 20 19:11:52.568464 2026] [security2:error] [pid 1914194:tid 1914205] [client 34.79.81.180:0] [client 34.79.81.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/"] [unique_id "ateg2EaOfaUHuvnX3S4K2gAAAMk"]
[Tue Oct 20 19:11:56.662151 2026] [security2:error] [pid 1913067:tid 1913081] [client 34.79.81.180:0] [client 34.79.81.180] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation
...
show less
Web App Attack
Bad Web Bot
🇳🇱
Savvii
2026-10-20 17:06:17
(2 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-10-20 17:03:58
(2 days ago)
Suspicious URL access.
Web App Attack