🇦🇺
greenhost.com.au
2026-10-27 07:07:50
(1 hour ago)
web application attack (34 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s ...
show more
web application attack (34 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
show less
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-10-27 05:49:34
(2 hours ago)
27/Oct/2026:05:49:33 +0000;34.80.75.168;"/robots.txt"
27/Oct/2026:05:49:33 +0000;34.80.75.168;"/site ...
show more
27/Oct/2026:05:49:33 +0000;34.80.75.168;"/robots.txt"
27/Oct/2026:05:49:33 +0000;34.80.75.168;"/sitemap.xml"
27/Oct/2026:05:49:34 +0000;34.80.75.168;"/sitemap_index.xml"
27/Oct/2026:05:49:34 +0000;34.80.75.168;"/users/login"
27/Oct/2026:05:49:34 +0000;34.80.75.168;"/login"
27/Oct/2026:05:49:34 +0000;34.80.75.168;"/dashboard"
27/Oct/2026:05:49:34 +0000;34.80.75.168;"/admin/login"
...
show less
Web Spam
Brute-Force
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-27 05:45:42
(2 hours ago)
paulshipley.com.au:443 34.80.75.168 - - [27/Oct/2026:16:44:57 +1100] "GET /zqhz0br3chg4vvy7rbke HTTP ...
show more
paulshipley.com.au:443 34.80.75.168 - - [27/Oct/2026:16:44:57 +1100] "GET /zqhz0br3chg4vvy7rbke HTTP/1.1" 404 80352 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
paulshipley.com.au:443 34.80.75.168 - - [27/Oct/2026:16:44:57 +1100] "GET /ngsw.json HTTP/1.1" 404 80123 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
paulshipley.com.au:443 34.80.75.168 - - [27/Oct/2026:16:44:57 +1100] "GET /uyqr9b96d61p0gpenvxz HTTP/1.1" 404 76083 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
paulshipley.com.au:443 34.80.75.168 - - [27/Oct/2026:16:44:57 +1100] "GET /z9x8c7v6b5-debug-trigger-paulshipley.com.au HTTP/1.1" 404 80385 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
paulshipley.com.au:443 34.80.75.168 - - [27/
...
show less
Web App Attack
🇦🇺
rubixstudios
2026-10-27 03:34:02
(5 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇦🇺
Proxay Fox
2026-10-27 01:01:56
(7 hours ago)
34.80.75.168 - - [27/Oct/2026:11:01:49 +1000] "GET /supabase/config.toml HTTP/1.1" 301 162 "-" "CCBo ...
show more
34.80.75.168 - - [27/Oct/2026:11:01:49 +1000] "GET /supabase/config.toml HTTP/1.1" 301 162 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" 404 348 TLSv1.3/TLS_AES_256_GCM_SHA384 . e867e066b04102727becbb2d74d35c57fb4c4731f789f344c266906e4e7cdf00
34.80.75.168 - - [27/Oct/2026:11:01:51 +1000] "GET /@fs/.env?raw?? HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "-" 444 348 TLSv1.3/TLS_AES_256_GCM_SHA384 . b6005796428ea757f385172a5c34e71799ad44c6d2a63c3370847759aaf997a8
34.80.75.168 - - [27/Oct/2026:11:01:51 +1000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 150 "-" "-" "-" 48 295 TLSv1.3/TLS_AES_256_GCM_SHA384 . f1edbf3b9728438a252243f405d1aeb54d571cdd1e43fa66f560ae743d969284
34.80.75.168 - - [27/Oct/2026:11:01:51 +1000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 150 "-" "-" "-" 61 295 TLSv1.3/TLS_AES_256_GCM_SHA384 . 31d17130c367c2d6df32c73ff09c2292d5676b7d50c423b0b9b0b6e1e2dbd7b2
34.80.7
...
show less
Brute-Force
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-27 00:18:19
(8 hours ago)
[Tue Oct 27 11:18:18.958567 2026] [security2:error] [pid 184776] [client 34.80.75.168:44144] [client ...
show more
[Tue Oct 27 11:18:18.958567 2026] [security2:error] [pid 184776] [client 34.80.75.168:44144] [client 34.80.75.168] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shotbysuzanne.com.au"] [uri "/public/.env"] [unique_id "at_tylL4eui24ARjVkIsbgAAAAA"]
...
show less
Web App Attack
🇦🇺
artful
2026-10-26 21:42:00
(11 hours ago)
Excessive errors ~1.8k in recent hours
Web App Attack
🇦🇺
screwlooseit.com.au
2026-10-26 19:03:24
(13 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
168.75.80.34.bc.googleusercontent.com
Web App Attack
🇬🇧
consul.to
2026-10-26 18:32:31
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
Bay13
2026-10-26 18:27:24
(14 hours ago)
CrowdSec:custom/http-probing
Web App Attack
🇦🇺
AWW-Admin
2026-10-26 18:11:31
(14 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.80.75.168 (TW/Taiwan/168.75.80.34.bc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.80.75.168 (TW/Taiwan/168.75.80.34.bc.googleusercontent.com)
show less
SQL Injection
🇦🇺
2000cn.com.au
2026-10-26 18:00:36
(14 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇫🇷
dynamix
2026-10-26 13:46:24
(18 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
ELYAZ
2026-10-26 12:56:25
(19 hours ago)
(y3) Failed access -byebye- from 34.80.75.168 (TW/Taiwan/168.75.80.34.bc.googleusercontent.com): (C ...
show more
(y3) Failed access -byebye- from 34.80.75.168 (TW/Taiwan/168.75.80.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
2026-10-26 11:49:40
(20 hours ago)
Web application attack detected.
Web App Attack