2026-09-27 19:48:20
(4 weeks ago)
$f2bV_matches
Brute-Force
🇩🇪
klaus_ph
2026-09-26 10:22:33
(1 month ago)
2026-09-25 14:57:17,534 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.21.173.167
.. ...
show more
2026-09-25 14:57:17,534 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.21.173.167
...
show less
Bad Web Bot
🇺🇸
Charlesiv
2026-09-23 06:00:29
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /icecoder/lib/terminal-xhr.php
Timestamp: 2026-09-23T03:22:06Z
Ray ID: a3f66c4d9b9aefdf
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
show less
Bad Web Bot
🇮🇳
evicky2002
2026-09-23 06:00:01
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇲🇽
octageeks.com
2026-09-23 04:17:45
(1 month ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇬🇧
noise.agency
2026-09-23 02:13:45
(1 month ago)
34.21.173.167 (SG/Singapore/167.173.21.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
2026-09-23 02:12:04
(1 month ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-09-23 01:56:09
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 34.21.173.167 (167.173.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.21.173.167 (167.173.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 21:56:05.503560 2026] [security2:error] [pid 6399:tid 6399] [client 34.21.173.167:44274] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thewhitedfamily.vrevgaming.net|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thewhitedfamily.vrevgaming.net"] [uri "/config/master.key"] [unique_id "arMxtQeOC2fLGtIx1vCS9AAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-23 01:52:55
(1 month ago)
[ti-30al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-30al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.21.173.167 - - [23/Sep/2026:03:52:35 +0200] "GET /sign-in HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.173.167 - - [23/Sep/2026:03:52:35 +0200] "GET /auth/login HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.173.167 - - [23/Sep/2026:03:52:35 +0200] "GET /auth HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.21.173.167 - - [23/Sep/2026:03:52:35 +0200] "GET /z9x8c7v6b5-debug-trigger-ti-30.alt255.net HTTP/2.0" 404 2004 "-" "Moz
...
show less
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-09-23 01:19:34
(1 month ago)
AetherFox VoidGuard detected: [Wed Sep 23 03:19:33.777883 2026] [authz_core:error] [pid 505153:tid 5 ...
show more
AetherFox VoidGuard detected: [Wed Sep 23 03:19:33.777883 2026] [authz_core:error] [pid 505153:tid 505165] [client 34.21.173.167:33330] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Wed Sep 23 03:19:33.778106 2026] [authz_core:error] [pid 505153:tid 505165] [client 34.21.173.167:33330] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Sep 23 03:19:34.036367 2026] [authz_core:error] [pid 505153:tid 505180] [client 34.21.173.167:33330] AH01630: client denied by server configuration: proxy:https://[MASKED]/secure
[Wed Sep 23 03:19:34.036576 2026] [authz_core:error] [pid 505153:tid 505180] [client 34.21.173.167:33330] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Wed Sep 23 03:19:34.244418 2026] [authz_core:error] [pid 505153:tid 505167] [client 34.21.173.167:33330] AH01630: client denied by server configuration: proxy:https://[MASKED]/auth
...
show less
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-09-23 01:03:16
(1 month ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
2026-09-23 00:21:50
(1 month ago)
$f2bV_matches
Brute-Force
🇫🇷
✨
2026-09-23 00:09:16
(1 month ago)
Rule : Security
Rule: Security
Event: Security
0 - %592 34.21.173.167 59664 ***hidden-privacy*** ...
show more
Rule : Security
Rule: Security
Event: Security
0 - %592 34.21.173.167 59664 ***hidden-privacy*** 443 6 459341 %597 13
show less
Port Scan
Hacking
Brute-Force
🇩🇪
updown.io
2026-09-22 23:50:28
(1 month ago)
{"level":"info","ts":1790120840.2402048,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790120840.2402048,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.21.173.167","remote_port":"47314","client_ip":"34.21.173.167","proto":"HTTP/2.0","method":"GET","host":"uptime.opentimestamps.net","uri":"/@fs/../.env?raw??","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"uptime.opentimestamps.net","ech":false}},"bytes_read":0,"user_id":"","duration":0.00014196,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790120843.1012487,"logger":"http.log.access.
...
show less
DDoS Attack
Web App Attack
🇮🇹
eliosbrocchi
2026-09-22 23:06:19
(1 month ago)
34.21.173.167 - - [23/Sep/2026:01:06:18 +0200] "GET /gcp-service.json HTTP/2.0" 404 264 "-" "Mozilla ...
show more
34.21.173.167 - - [23/Sep/2026:01:06:18 +0200] "GET /gcp-service.json HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
VPN IP