🇳🇱
homeshowdomain.nl
2026-11-09 23:01:03
UTC ·
(5 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-08.
Web App Attack
SSH
Hacking
🇺🇸
RonnieGas
2026-11-09 08:29:06
UTC ·
(6 days ago)
Automated scanning and API/path probing against a web application (login, API and path enumeration, proxy pool). Blocked by firewall.
Web App Attack
Bad Web Bot
Brute-Force
Hacking
🇨🇭
backslash
2026-11-08 21:48:01
UTC ·
(6 days ago)
block ruleset 3D3AFA921A373ECE19B6BA285C2D722163304638
Bad Web Bot
2026-11-08 19:00:09
UTC ·
(6 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇺🇸
EmilGH
2026-11-08 18:49:55
UTC ·
(6 days ago)
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 538 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000 ...
show more
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 538 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /manifest.json HTTP/1.1" 404 538 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /b3m2ujz1ln6keu4nb09c HTTP/1.1" 404 538 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /dist/manifest.json HTTP/1.1" 404 4508 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.253.34.234 - - [08/Nov/2026:18:49:54 +0000] "GET /static/manifest.json HTTP/1.1" 404 538 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb
...
show less
Bad Web Bot
Web App Attack
2026-11-08 18:39:47
UTC ·
(6 days ago)
Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-probing
Brute-Force
🇫🇷
masterguru
2026-11-08 17:54:00
UTC ·
(6 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
🇺🇸
TPI-Abuse
2026-11-08 17:45:01
UTC ·
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 35.253.34.234 (234.34.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:44:53.641682 2026] [security2:error] [pid 6870:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 35.253.34.234 (234.34.253.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 12:44:53.641682 2026] [security2:error] [pid 6870:tid 6870] [client 35.253.34.234:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.caspina.com"] [uri "/.env.preprod"] [unique_id "avC1Fd5bIllJdjLbKWZBcQAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
pepitogrillo
2026-11-08 16:19:00
UTC ·
(6 days ago)
35.253.34.234 - - [08/Nov/2026:16:18:59 +0000] "GET /sitemap.xml HTTP/1.1" 404 7208 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1 ...
show more
35.253.34.234 - - [08/Nov/2026:16:18:59 +0000] "GET /sitemap.xml HTTP/1.1" 404 7208 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
DNS Compromise
DNS Poisoning
Fraud Orders
DDoS Attack
Ping of Death
Phishing
Fraud VoIP
Open Proxy
Web Spam
Email Spam
Port Scan
Hacking
SQL Injection
Bad Web Bot
Exploited Host
Web App Attack
IoT Targeted
🇮🇹
VHosting
2026-11-08 15:00:05
UTC ·
(6 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
