๐ฉ๐ช
updown.io
2026-10-04 21:50:14
(13 minutes ago)
{"level":"info","ts":1791150609.8182049,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791150609.8182049,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.107.30.191","remote_port":"56886","client_ip":"34.107.30.191","proto":"HTTP/2.0","method":"GET","host":"status.motionvfx.com","uri":"/static/manifest.json","headers":{"X-Nextjs-Data":["1"],"Upgrade-Insecure-Requests":["1"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua-Mobile":["?1"],"Priority":["u=0, i"],"Sec-Fetch-Dest":["document"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K)
...
show less
DDoS Attack
Web App Attack
๐ช๐ธ
robotstxt
2026-10-04 20:09:58
(1 hour ago)
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 34900 "-" "Mo ...
show more
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 34900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.107.30.191"
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "GET /dist/manifest.json HTTP/2.0" 403 34900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.107.30.191"
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "GET /b8b6qobtprhars1g4m7o/ HTTP/2.0" 403 36700 "https://www.outcomes10.com/b8b6qobtprhars1g4m7o" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" edge="34.107.30.191"
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "GET /z9x8c7v6b5-debug-trigger-www.outcomes10.com HTTP/2.0" 403 36724 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-" edge="34.107.30.191"
34.107.30.191 - - [04/Oct/2026:20:08:56 +0000] "G
...
show less
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-10-04 19:13:23
(2 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1)
show less
Bad Web Bot
๐ฌ๐ง
noise.agency
2026-10-04 18:59:39
(3 hours ago)
34.107.30.191 (DE/Germany/191.30.107.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
๐ฉ๐ช
LRob
2026-10-04 12:38:15
(9 hours ago)
Wordlist path sweep | method: GET, POST | path: /yzb1vx8nvtpqao7bp354, /webpack-stats.json, /dist/ma ...
show more
Wordlist path sweep | method: GET, POST | path: /yzb1vx8nvtpqao7bp354, /webpack-stats.json, /dist/manifest.json (+17 more) | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] ), Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36, Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/ (+7 more)
show less
Port Scan
Web App Attack
๐บ๐ธ
Copious7283
2026-10-04 10:37:28
(11 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-10-04 10:28:47
(11 hours ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-04 10:20:41
(11 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.107.30.191 - - [04/Oct/2026:12:20:22 +0200] "GET /.ssh/config HTTP/2.0" 404 32853 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-04 09:55:01
(12 hours ago)
XSS Attempt
Hacking
๐ฉ๐ช
Skyrider
2026-10-04 09:08:57
(12 hours ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ฌ๐ท
setupgr
2026-10-04 08:21:17
(13 hours ago)
(PERMBLOCK) 34.107.30.191 (DE/Germany/Hesse/Frankfurt am Main/-/[AS396982 Google LLC]) has had more ...
show more
(PERMBLOCK) 34.107.30.191 (DE/Germany/Hesse/Frankfurt am Main/-/[AS396982 Google LLC]) has had more than 2 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs: N/A
show less
Port Scan
Anonymous
2026-10-04 07:49:56
(14 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฌ๐ท
setupgr
2026-10-04 06:11:25
(15 hours ago)
(mod_security) mod_security (id:11000011) triggered by 34.107.30.191 (DE/Germany/Hesse/Frankfurt am ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.107.30.191 (DE/Germany/Hesse/Frankfurt am Main/-/[AS396982 Google LLC]): 1 in the last 86400 secs (CF_ENABLE); Ports: *; Direction: inout; Trigger: LF_MODSEC; Logs: [Sun Oct 04 09:11:25.052189 2026] [security2:error] [pid 148178:tid 148179] [remote 34.107.30.191:37058] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "141"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 191.30.107.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "asteriassantorini.com"] [uri "/"] [unique_id "asHuDUyLl8dUGJEjpZ-InAAAkgA"]
show less
Port Scan
๐ซ๐ท
dynamix
2026-10-04 05:09:06
(16 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-04 04:50:11
(17 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack