|
🇫🇷
Batz
|
|
[34.80.61.90] Multiple FTP BruteForce Attack
|
FTP Brute-Force
Hacking
Brute-Force
Port Scan
|
|
Anonymous
|
|
Automated web scanner. Requested suspicious paths: /.vite/manifest.json | /login. UTC: 2026-10-01 04:29:39.
|
Web App Attack
|
|
🇩🇪
itsolon
|
|
[01/Oct/2026:06:02:28 +0200] 179082734857.418915 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734857.489947 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734850.614117 34.80.61.90 40134 217.154.7.177 ...
show more
[01/Oct/2026:06:02:28 +0200] 179082734857.418915 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734857.489947 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734850.614117 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734886.786617 34.80.61.90 40134 217.154.7.177 443
[01/Oct/2026:06:02:28 +0200] 179082734820.563013 34.80.61.90 40134 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇧🇪
cmbplf
|
|
174 requests with url.path */@fs/*
|
Brute-Force
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.61.90 (90.61.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:18:25.473493 2026] [security2:error] [pid 16027:tid 1602 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.61.90 (90.61.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 23:18:25.473493 2026] [security2:error] [pid 16027:tid 16027] [client 34.80.61.90:51222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||fingerprintinternational.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "fingerprintinternational.com"] [uri "/z9x8c7v6b5-debug-trigger-fingerprintinternational.com"] [unique_id "ar3RAcmbTImNJSUWYFubYgAAAC0"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
Ar1s
|
|
[1:2061026] ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) ::: Port: 80/TCP
|
Exploited Host
|
|
🇸🇬
Cloudkul Cloudkul
|
|
Attempted Brute Force on our application
|
Brute-Force
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.80.61.90 (90.61.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 20:01:04.261559 2026] [security2:error] [pid 8158:tid 8158] ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.61.90 (90.61.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 20:01:04.261559 2026] [security2:error] [pid 8158:tid 8158] [client 34.80.61.90:54872] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||financesf.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "financesf.com"] [uri "/z9x8c7v6b5-debug-trigger-financesf.com"] [unique_id "ar2iwBNB9bQUrXl7oSnHyQAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
kbeezie
|
|
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /api/v2/settings HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /__/firebase/init.json HTTP/1.1" 429 162 "-" "Mozilla/5. ...
show more
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /api/v2/settings HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /__/firebase/init.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /env.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /api/config HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.80.61.90 - - [30/Sep/2026:19:06:19 -0400] "GET /login HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
itsolon
|
|
[01/Oct/2026:00:35:53 +0200] 179080775334.770459 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775334.758815 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775373.250687 34.80.61.90 51784 217.154.7.177 ...
show more
[01/Oct/2026:00:35:53 +0200] 179080775334.770459 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775334.758815 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775373.250687 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775388.940700 34.80.61.90 51784 217.154.7.177 443
[01/Oct/2026:00:35:53 +0200] 179080775357.469631 34.80.61.90 51784 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
🇩🇪
bazter.pro
|
|
Fail2Ban: plesk-bot-aggressive - 15 failures
|
Port Scan
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Web application attack detected.
|
Web App Attack
|
|
🇳🇴
Bots.go.to.hell
|
|
This IP was detected by CrowdSec triggering custom/http-bad-crawler-ban
|
Web App Attack
Bad Web Bot
|
|
🇩🇪
itsolon
|
|
[30/Sep/2026:20:58:53 +0200] 179079473337.698510 34.80.61.90 37442 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473368.617251 34.80.61.90 37442 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473331.475405 34.80.61.90 37442 217.154.7.177 ...
show more
[30/Sep/2026:20:58:53 +0200] 179079473337.698510 34.80.61.90 37442 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473368.617251 34.80.61.90 37442 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473331.475405 34.80.61.90 37442 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473310.866639 34.80.61.90 37450 217.154.7.177 443
[30/Sep/2026:20:58:53 +0200] 179079473350.764350 34.80.61.90 37450 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|