🇳🇱
Site.eu
2026-06-11 07:10:48
(1 hour ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
masterguru
2026-06-11 03:06:30
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".credentials" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇫🇷
✨
2026-06-11 01:04:09
(7 hours ago)
Domain : pacto.dev.br
Rule : config
2026-06-11 01:02:05 148.72.166.128 GET /.credentials - 443 - 8.2 ...
show more
Domain : pacto.dev.br
Rule : config
2026-06-11 01:02:05 148.72.166.128 GET /.credentials - 443 - 8.231.34.168 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.4 (KHTML like Gecko) Chrome/22.0.1229.56 Safari/537.4 - pacto.dev.br 404 0 2 12868 230 1642 - -
show less
Hacking
SQL Injection
🇩🇪
grassau.com
2026-06-11 00:44:22
(7 hours ago)
*Port Scan* detected from 8.231.34.168 (US/United States/Ohio/Columbus/168.34.231.8.bc.googleusercon ...
show more
*Port Scan* detected from 8.231.34.168 (US/United States/Ohio/Columbus/168.34.231.8.bc.googleusercontent.com).
show less
Port Scan
🇫🇷
✨
2026-06-11 00:33:11
(7 hours ago)
Domain : exmoor-walking-holidays.co.uk
Rule : config
2026-06-11 00:32:42 ***hidden-privacy*** GET /. ...
show more
Domain : exmoor-walking-holidays.co.uk
Rule : config
2026-06-11 00:32:42 ***hidden-privacy*** GET /.aws/config - 443 - 8.231.34.168 HTTP/1.1 Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36 OPR/63.0.3368.35 - exmoor-walking-holidays.co.uk 404 0 2 1535 272 93 - -
show less
Hacking
SQL Injection
🇳🇱
e.fierstra
2026-06-11 00:00:50
(8 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-10 21:59:55
(10 hours ago)
Auto-ban: >3000 req/min op 2026-06-10
Web App Attack
SSH
Hacking
🇩🇪
Petros Stefanakis
2026-06-10 20:59:33
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 8.231.34.168 (US/United States/168.34.2 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 8.231.34.168 (US/United States/168.34.231.8.bc.googleusercontent.com)
show less
SQL Injection
2026-06-10 13:54:00
(18 hours ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Brict IT
2026-06-10 12:16:12
(20 hours ago)
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-06-10 12:11:56
(20 hours ago)
{"level":"info","ts":1781093516.3334663,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781093516.3334663,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"8.231.34.168","remote_port":"46298","client_ip":"8.231.34.168","proto":"HTTP/1.1","method":"GET","host":"lkjihgfedcbahgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/actuator/heapdump","headers":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["BlackBerry7520/4.0.0 Profile/MIDP-2.0 Configuration/CLDC-1.1 UP.Browser/5.0.3.3 UP.Link/5.1.2.12 (Google WAP Proxy/1.0)"],"Accept-Charset":["utf-8"]}},"bytes_read":0,"user_id":"","duration":0.000043963,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://lkjihgfedcbahgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/actuator/heapdump"],"Content-Type":[]}}
{"level":"info","ts":1781093516.345147,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"8.231.34.168","remote_port":"46308","client_ip":"8.23
...
show less
DDoS Attack
Web App Attack
2026-06-10 09:52:37
(22 hours ago)
[Wed Jun 10 09:52:36.524489 2026] [authz_core:error] [pid 533568:tid 533568] [client 8.231.34.168:50 ...
show more
[Wed Jun 10 09:52:36.524489 2026] [authz_core:error] [pid 533568:tid 533568] [client 8.231.34.168:50256] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/app/actuator
[Wed Jun 10 09:52:36.648764 2026] [authz_core:error] [pid 533510:tid 533510] [client 8.231.34.168:50272] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/app/actuator
[Wed Jun 10 09:52:36.852262 2026] [authz_core:error] [pid 533568:tid 533568] [client 8.231.34.168:50284] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/app/actuator
[Wed Jun 10 09:52:36.960934 2026] [authz_core:error] [pid 533510:tid 533510] [client 8.231.34.168:50310] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/app/actuator
[Wed Jun 10 09:52:37.200546 2026] [authz_core:error] [pid 533568:tid 533568] [client 8.231.34.168:50322] AH01630: client denied by server configuration: /var/www/shop.gassycat.be/htdocs/app/heapdump
...
show less
Brute-Force
🇩🇪
Marc
2026-06-10 09:00:35
(23 hours ago)
8.231.34.168 - - [10/Jun/2026:11:00:35 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 404 3229 "-" "Mozilla/5 ...
show more
8.231.34.168 - - [10/Jun/2026:11:00:35 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 404 3229 "-" "Mozilla/5.0 (Linux; U; Android 2.1; en-us; Nexus One Build/ERD62) AppleWebKit/530.17 (KHTML, like Gecko) Version/4.0 Mobile Safari/530.17" 8.231.34.168 - - [10/Jun/2026:11:00:35 +0200] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 3230 "-" "Mozilla/5.0 (Linux; U; Android 7.0; es-es; Redmi Note 4 Build/NRD90M) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3578.141 Mobile Safari/537.36 XiaoMi/MiuiBrowser/10.9.7-g" 8.231.34.168 - - [10/Jun/2026:11:00:35 +0200] "GET /.github/workflows/main.yml HTTP/1.1" 404 3230 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36"
show less
Brute-Force
🇺🇸
TPI-Abuse
2026-06-10 08:17:19
(23 hours ago)
(mod_security) mod_security (id:210730) triggered by 8.231.34.168 (168.34.231.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.231.34.168 (168.34.231.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 10 04:17:15.905544 2026] [security2:error] [pid 15966:tid 15966] [client 8.231.34.168:47222] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||test.kbalan.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "test.kbalan.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "aikdi02FONxp78bmUMTX6wAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 07:29:36
(1 day ago)
Aggressive web scan
Web App Attack