2026-09-18 01:18:42
(6 hours ago)
Detected by CrowdSec: crowdsecurity/http-bad-user-agent
Web App Attack
🇩🇪
rh24
2026-09-18 00:56:13
(6 hours ago)
(badbots) Bad bot user-agent [redacted] from 34.80.150.119 (TW/Taiwan/119.150.80.34.bc.googleusercon ...
show more
(badbots) Bad bot user-agent [redacted] from 34.80.150.119 (TW/Taiwan/119.150.80.34.bc.googleusercontent.com)
show less
Hacking
🇹🇷
pashait
2026-09-17 22:26:03
(9 hours ago)
Auto-blocked by Seczar SecureOps — IPS Web Attack Signature (2 events in 5min) at 2026-09-17 22:26
Web App Attack
Bad Web Bot
🇮🇹
VHosting
2026-09-17 22:25:03
(9 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-09-17 20:23:13
(11 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-17 17:30:48
(14 hours ago)
Wing FTP Server Remote Code Execution.
Web App Attack
🇬🇧
Marten Mark
2026-09-17 15:41:23
(16 hours ago)
34.80.150.119 - - [17/Sep/2026:15:41:20 +0000] "GET /document.php?modulepart=systemtools&file=../con ...
show more
34.80.150.119 - - [17/Sep/2026:15:41:20 +0000] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/2.0" 404 1450 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.80.150.119 - - [17/Sep/2026:15:41:20 +0000] "GET /.dockerenv HTTP/2.0" 404 1448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.80.150.119 - - [17/Sep/2026:15:41:20 +0000] "GET /.dockerenv HTTP/2.0" 404 1448 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.80.150.119 - - [17/Sep/2026:15:41:21 +0000] "GET /.env.local?raw HTTP/2.0" 404 1454 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.80.150.119 - - [17/Sep/2026:15:41:21 +0000] "GET /.env.local?raw HTTP/2.0" 404 1454 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.80.15
...
show less
Port Scan
Web App Attack
🇧🇾
anan17
2026-09-17 13:34:12
(18 hours ago)
Scanning for SSH authorized keys, SSL localhost keys, Kubernetes tokens, and .env files using spoofe ...
show more
Scanning for SSH authorized keys, SSL localhost keys, Kubernetes tokens, and .env files using spoofed spider User-Agents
show less
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-09-17 12:55:29
(18 hours ago)
34.80.150.119 - - [17/Sep/2026:15:55:16 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 ...
show more
34.80.150.119 - - [17/Sep/2026:15:55:16 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.80.150.119 - - [17/Sep/2026:15:55:28 +0300] "GET /secrets.yml HTTP/2.0" 404 10305 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Web App Attack
🇬🇧
consul.to
2026-09-17 12:42:39
(19 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Marten Mark
2026-09-17 12:35:55
(19 hours ago)
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" ...
show more
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /rclone.conf HTTP/2.0" 404 5335 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /rclone.conf HTTP/2.0" 404 5335 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /build/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /build/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36"
34.80.150.119 - - [17/Sep/2026:12:35:53 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5335 "-" "Mozilla/5.0 (Linux; Android 10;
...
show less
Port Scan
Web App Attack
2026-09-17 12:20:41
(19 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-09-17 11:09:38
(20 hours ago)
(PERMBLOCK) 34.80.150.119 (TW/Taiwan/Taipei City/Taipei/119.150.80.34.bc.googleusercontent.com/[reda ...
show more
(PERMBLOCK) 34.80.150.119 (TW/Taiwan/Taipei City/Taipei/119.150.80.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
2026-09-17 11:02:05
(20 hours ago)
Web App Attack
🇺🇸
Ar1s
2026-09-17 09:49:17
(22 hours ago)
[1:2061026] ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) ::: Port: 80/TCP
Exploited Host