🇦🇺
2000cn.com.au
2026-07-07 07:00:52
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
2026-07-05 10:02:12
(2 days ago)
[ns41.kdns.gr] httpd-noisy-crawler: sites=www.monastiria.gr; logs=/var/log/httpd/domains/monastiria. ...
show more
[ns41.kdns.gr] httpd-noisy-crawler: sites=www.monastiria.gr; logs=/var/log/httpd/domains/monastiria.gr.log; samples=mj12bot:/tag/%CF%80%CE%B1%CF%84%CF%81%CE%BF%CE%BA%CE%BF%CF%83%CE%BC%CE%AC%CF%82-%CE%BA%CE%B1%CF%84%CE%B1%CF%81%CE%B1%CE%BC%CE%AD%CE%BD%CE%BF-%CF%84%CE%BF-%CE%BA%CE%AD%CF%81%CE%B4%CE%BF%CF%82-%CF%80%CE%BF%CF%85/feed/ | mj12bot:/tag/%CF%80%CE%B5%CF%81%CE%AF-%CF%84%CE%B7%CF%82-%CF%87%CF%81%CE%B9%CF%83%CF%84%CE%BF%CF%8D-%CE%B3%CE%B5%CE%BD%CE%BD%CE%AE%CF%83%CE%B5%CF%89%CF%82/ | mj12bot:/tag/%CF%80%CE%B5%CF%81%CE%AF-%CF%84%CE%B7%CF%82-%CF%87%CF%81%CE%B9%CF%83%CF%84%CE%BF%CF%8D-%CE%B3%CE%B5%CE%BD%CE%BD%CE%AE%CF%83%CE%B5%CF%89%CF%82/feed/
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-07-03 23:33:34
(4 days ago)
259 requests with url.path /phpinfo.php
250 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇪🇸
elcruzado.es
2026-07-03 22:16:01
(4 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 51.68.34.57 (FR/Fran ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 51.68.34.57 (FR/France/ns3127560.ip-51-68-34.eu)
show less
Bad Web Bot
🇺🇸
mnsf
2026-07-03 21:05:14
(4 days ago)
Too many Status 40X (19)
Brute-Force
Web App Attack
🇸🇮
extremevital
2026-07-02 14:36:34
(5 days ago)
51.68.34.57 [02/Jul/2026:16:36:33 +0200] LOCAL: "GET /en/cycling/bicycle-seats-c-2_9.html?AND_1=1%2B ...
show more
51.68.34.57 [02/Jul/2026:16:36:33 +0200] LOCAL: "GET /en/cycling/bicycle-seats-c-2_9.html?AND_1=1%2BOR%2B(%3C'%22%3EiKO)),&calc=old&op=0ga3r1'&usg=AFQjCNGAkKjfmhBoBjJhNQ20vXxMMHsPjQ'nvOpzp HTTP/1.1" 403 46 0.004 "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot
🇬🇷
setupgr
2026-06-26 03:11:13
(1 week ago)
(mod_security) mod_security (id:11000010) triggered by 51.68.34.57 (FR/France/-/-/-/[AS16276 OVH SAS ...
show more
(mod_security) mod_security (id:11000010) triggered by 51.68.34.57 (FR/France/-/-/-/[AS16276 OVH SAS]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Fri Jun 26 06:11:09.096878 2026] [security2:error] [pid 813457:tid 813656] [client 51.68.34.57:59422] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "114"] [id "11000010"] [msg "BLOCKED BOT: MJ12bot - in pankoskal.gr"] [severity "CRITICAL"] [hostname "pankoskal.gr"] [uri "/robots.txt"] [unique_id "aj3tzQGsbfjkAehEgyl40gAAABY"]
show less
Port Scan
🇮🇩
it.inka
2026-06-26 00:28:18
(1 week ago)
51.68.34.57 - - [26/Jun/2026:07:28:17 +0700] "GET /?or_id=slotid%2088 HTTP/1.1" 403 162 "-" "Mozilla ...
show more
51.68.34.57 - - [26/Jun/2026:07:28:17 +0700] "GET /?or_id=slotid%2088 HTTP/1.1" 403 162 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Web App Attack
2026-06-25 06:30:25
(1 week ago)
Detected by CrowdSec: crowdsecurity/http-bad-user-agent
Web App Attack
🇫🇷
masterguru
2026-06-23 10:19:52
(2 weeks ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 51.68.34.57 (FR/France/ns3127560.ip-5 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 51.68.34.57 (FR/France/ns3127560.ip-51-68-34.eu): 2 in the last 3600 secs (0-196)
show less
Hacking
🇬🇧
Mendip_Defender
2026-06-20 20:05:24
(2 weeks ago)
51.68.34.57 - - [20/Jun/2026:21:05:18 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (co ...
show more
51.68.34.57 - - [20/Jun/2026:21:05:18 +0100] "GET /robots.txt HTTP/1.1" 403 146 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)"
...
show less
Bad Web Bot
🇬🇷
setupgr
2026-06-19 23:42:31
(2 weeks ago)
(mod_security) mod_security (id:11000010) triggered by 51.68.34.57 (FR/France/Hauts-de-France/Roubai ...
show more
(mod_security) mod_security (id:11000010) triggered by 51.68.34.57 (FR/France/Hauts-de-France/Roubaix/-/[AS16276 OVH]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Sat Jun 20 02:42:26.343112 2026] [security2:error] [pid 202885:tid 202936] [client 51.68.34.57:43714] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "104"] [id "11000010"] [msg "BLOCKED BOT: MJ12bot - in www.setworldup.com"] [severity "CRITICAL"] [hostname "www.setworldup.com"] [uri "/robots.txt"] [unique_id "ajXT4krlp52aw72Tw8d7AgAAARg"]
show less
Port Scan
🇩🇪
rh24
2026-06-19 14:31:06
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 51.68.34.57 (FR/Fran ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 51.68.34.57 (FR/France/ns3127560.ip-51-68-34.eu)
show less
Bad Web Bot
🇺🇸
cwytech
2026-06-17 22:38:00
(2 weeks ago)
Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.
Bad Web Bot
Web App Attack
🇨🇿
ptlab
2026-06-13 06:45:03
(3 weeks ago)
Detected php_null_array_access attack from WP-host.
Hacking
Web App Attack