Anonymous
2026-09-06 13:37:59
(8 minutes ago)
Portscan: TCP/8443 (5x), TCP/8080 (5x), TCP/80, TCP/443
Port Scan
🇩🇪
ghostwarriors
2026-09-06 13:20:12
(25 minutes ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-09-06 13:01:54
(44 minutes ago)
2026/09/06 15:01:54 [error] 19599#178749: *3149215 limiting requests, excess: 0.991 by zone "crawler ...
show more
2026/09/06 15:01:54 [error] 19599#178749: *3149215 limiting requests, excess: 0.991 by zone "crawler", client: 34.11.173.27, server: ksol.io, request: "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/2.0", host: "ksol.io"
...
show less
Bad Web Bot
🇨🇦
Mediashaker
2026-09-06 12:28:17
(1 hour ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.11.173.27 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.11.173.27 (US/United States/27.173.11.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇨🇭
zynex
2026-09-06 10:56:41
(2 hours ago)
URL Probing: /.github/.env
Web App Attack
🇳🇱
Savvii
2026-09-06 10:40:10
(3 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-09-06 10:39:45
(3 hours ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
maxpower
2026-09-06 10:29:18
(3 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.11.173.27 (US/United States/27.173.11 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.11.173.27 (US/United States/27.173.11.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.11.173.27 - - [06/Sep/2026:12:29:14 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 200 4740 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36" "34.11.173.27" host=yogiraji.it
show less
Port Scan
🇩🇪
Savvii
2026-09-06 09:55:59
(3 hours ago)
20 attempts against mh-misbehave-ban on radon
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
alferez
2026-09-06 09:48:05
(3 hours ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
Anonymous
2026-09-06 09:46:27
(3 hours ago)
34.11.173.27 - - [06/Sep/2026:11:46:18 +0200] "GET /host.key HTTP/1.1" 403 522 "-" "Mozilla/5.0 (Win ...
show more
34.11.173.27 - - [06/Sep/2026:11:46:18 +0200] "GET /host.key HTTP/1.1" 403 522 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
34.11.173.27 - - [06/Sep/2026:11:46:19 +0200] "GET /ssl/server.key HTTP/1.1" 403 5519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
34.11.173.27 - - [06/Sep/2026:11:46:19 +0200] "GET /private-key HTTP/1.1" 404 5516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
34.11.173.27 - - [06/Sep/2026:11:46:19 +0200] "GET /ssl/localhost.key HTTP/1.1" 403 5519 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
34.11.173.27 - - [06/Sep/2026:11:46:19 +0200] "GET /z9x8c7v6b5-debug-trigger-sso.conservatoriumvanamsterdam.nl HTTP/1.1" 404 5516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53
...
show less
DDoS Attack
Anonymous
2026-09-06 08:54:22
(4 hours ago)
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env?raw HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Maci ...
show more
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env?raw HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.68.23.173
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env?import&raw HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.68.23.174
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.68.23.173
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 12 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36" 172.68.23.173
34.11.173.27 - - [06/Sep/2026:03:54:20 -0500] "GET /.env.local?raw HTTP/1.1" 403 12 "-" "Mozilla/5.0 (
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-09-06 08:54:20
(4 hours ago)
Suspicious URL access.
Web App Attack
🇬🇧
Mendip_Defender
2026-09-06 08:29:13
(5 hours ago)
34.11.173.27 - - [06/Sep/2026:09:29:25 +0100] "GET /@fs/root/.oci/oci_api_key.pem?raw?? HTTP/1.1" 40 ...
show more
34.11.173.27 - - [06/Sep/2026:09:29:25 +0100] "GET /@fs/root/.oci/oci_api_key.pem?raw?? HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
34.11.173.27 - - [06/Sep/2026:09:29:25 +0100] "GET /@fs/root/.oci/config?raw?? HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
34.11.173.27 - - [06/Sep/2026:09:29:25 +0100] "GET /@fs/home/ubuntu/.oci/oci_api_key.pem?raw?? HTTP/1.1" 404 6446 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36 EdgA/149.0.0.0"
...
show less
Hacking
Web App Attack
🇫🇷
GabrielJST
2026-09-06 08:10:02
(5 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.11.173.27 (US/United States/27.173.1 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.11.173.27 (US/United States/27.173.11.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection