|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|
|
🇯🇵
amyriad
|
|
34.107.53.247 - - [12/Oct/2026:13:47:12 +0000] "GET /.env.secret HTTP/1.1" 404 196 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.107.53.247 - - [12/Oct/2026:13:47:12 +0000] "GET /.env.dev.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Kimi ...
show more
34.107.53.247 - - [12/Oct/2026:13:47:12 +0000] "GET /.env.secret HTTP/1.1" 404 196 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.107.53.247 - - [12/Oct/2026:13:47:12 +0000] "GET /.env.dev.local HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.107.53.247 - - [12/Oct/2026:13:47:12 +0000] "GET /.env.keys HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
|
DDoS Attack
Hacking
Brute-Force
|
|
🇪🇸
Adolfo Montaño
|
|
CrowdSec blocked IP for crowdsecurity/http-probing on localhost
|
Web App Attack
|
|
🇺🇸
gamabe
|
|
Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.
|
Hacking
|
|
🇬🇧
Aetherweb Ark
|
|
(mod_security) mod_security (id:949110) triggered by 34.107.53.247 (DE/Germany/247.53.107.34.bc.googleusercontent.com): N in the last X secs
|
Web App Attack
|
|
🇩🇪
Michel Wijnberg
|
|
34.107.53.247 - - [12/Oct/2026:11:52:12 +0000] "GET /secrets.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:33:23.399726 2026] [security2:error] [pid 30543:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:33:23.399726 2026] [security2:error] [pid 30543:tid 30543] [client 34.107.53.247:57132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uccryakima.org"] [uri "/.htpasswd"] [unique_id "aszFg7ZV1hv0UFZ8BmzubQAAACA"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
LRob
|
|
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151 ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36, Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) (+9 more) | path: /lib/terminal-xhr.php, /webpack-stats.json, /static/manifest.json (+17 more)
show less
|
Bad Web Bot
|
|
🇹🇼
tye
|
|
Wazuh Alert Evidence: 34.107.53.247 (34.107.53.247) - - [12/Oct/2026:18:28:52 +0800] "GET /vyup4dtl5yurf7j28mzj HTTP/1.1" 404 461 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
|
Web App Attack
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-sensitive-files
|
Brute-Force
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:11:36.796556 2026] [security2:error] [pid 572:tid 57 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 06:11:36.796556 2026] [security2:error] [pid 572:tid 572] [client 34.107.53.247:43826] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||twtcsl.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twtcsl.com"] [uri "/z9x8c7v6b5-debug-trigger-twtcsl.com"] [unique_id "asyyWNBWT8gEwnxkvqkhzgAAAFo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
bazter.pro
|
|
Fail2Ban: plesk-bot-aggressive - 15 failures
|
Port Scan
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:44:01.398684 2026] [security2:error] [pid 25785:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:44:01.398684 2026] [security2:error] [pid 25785:tid 25785] [client 34.107.53.247:50652] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||twilighthackers.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "twilighthackers.com"] [uri "/z9x8c7v6b5-debug-trigger-twilighthackers.com"] [unique_id "asyr4T0eTVo5D9RVNJu94AAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:25:21.638231 2026] [security2:error] [pid 3874:tid 3 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.107.53.247 (247.53.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 05:25:21.638231 2026] [security2:error] [pid 3874:tid 3896] [client 34.107.53.247:39758] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||tvpin.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "tvpin.com"] [uri "/z9x8c7v6b5-debug-trigger-tvpin.com"] [unique_id "asyngVUCNRta-cTTCbWhSwAAAFI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
