๐ฉ๐ช
klaus_ph
2026-09-29 10:00:18
(3 weeks ago)
2026-09-27 18:44:36,094 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 34.187.212.98
...
Bad Web Bot
๐ฉ๐ช
klaus_ph
2026-09-27 05:44:04
(4 weeks ago)
2026-09-26 02:05:57,042 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.187.212.98
.. ...
show more
2026-09-26 02:05:57,042 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.187.212.98
...
show less
Bad Web Bot
๐บ๐ธ
Charlesiv
2026-09-23 06:00:29
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.local
Query: ?import&raw
Timestamp: 2026-09-23T03:12:26Z
Ray ID: a3f65e23dc2dec1f
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)
show less
Bad Web Bot
๐ฎ๐ณ
evicky2002
2026-09-23 06:00:01
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฎ๐ณ
Shubham Kumar
2026-09-23 03:04:00
(1 month ago)
Repeated scrape-guard abuse (flag #0)
Web App Attack
๐ฉ๐ช
raph
2026-09-23 02:14:56
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐บ๐ธ
entangled_mongoose
2026-09-22 22:20:23
(1 month ago)
Probed /wp-json.
Web App Attack
๐บ๐ธ
Charlesiv
2026-09-22 22:01:24
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/terminal-xhr.php
Timestamp: 2026-09-22T19:13:28Z
Ray ID: a3f3a08a7da72b03
UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
show less
Bad Web Bot
๐ณ๐ฑ
oisecnet
2026-09-22 21:03:05
(1 month ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-22. 828 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-22. 828 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐ณ๐ด
Abuse Buster
2026-09-22 18:55:38
(1 month ago)
34.187.212.98 - [22/Sep/2026:20:55:35 +0200] "GET /.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozill ...
show more
34.187.212.98 - [22/Sep/2026:20:55:35 +0200] "GET /.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.187.212.98 - [22/Sep/2026:20:55:35 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 403 548 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.187.212.98 - [22/Sep/2026:20:55:35 +0200] "GET /z9x8c7v6b5-debug-trigger-www.wingthor.net HTTP/2.0" 404 1864 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
๐ฉ๐ช
pscriptos
2026-09-22 18:47:15
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐จ๐ฆ
Mediashaker
2026-09-22 18:41:43
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.187.212.98 (US/United States/98.212. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.187.212.98 (US/United States/98.212.187.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฉ๐ช
Hagen Schoebel
2026-09-22 18:39:41
(1 month ago)
Blocked by CrowdSec - Enabling body inspection (US)
Port Scan
Brute-Force
Web App Attack
SSH
๐ซ๐ฎ
oh.mg
2026-09-22 18:23:25
(1 month ago)
[Tue Sep 22 20:23:23.802521 2026] [security2:error] [pid 2235361:tid 2235363] [client 34.187.212.98: ...
show more
[Tue Sep 22 20:23:23.802521 2026] [security2:error] [pid 2235361:tid 2235363] [client 34.187.212.98:0] [client 34.187.212.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hk.mmn.ca"] [uri "/api/v1/validate/code"] [unique_id "arLHm3lXvCYinNMF_c8ECQAAAEA"]
[Tue Sep 22 20:23:24.891860 2026] [security2:error] [pid 2235361:tid 2235377] [client 34.187.212.98:0] [client 34.187.212.98] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
Charlesiv
2026-09-22 16:00:20
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/terminal-xhr.php
Timestamp: 2026-09-22T14:53:58Z
Ray ID: a3f224669acba384
UA: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
show less
Bad Web Bot