🇫🇮
tjs
2026-11-12 00:30:00
UTC ·
(5 hours ago)
web attack
Hacking
Web App Attack
🇳🇦
jacqueskruger
2026-11-07 15:49:34
UTC ·
(4 days ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-06T21:58:31Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-06T21:58:31Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
Anonymous
2026-11-07 14:45:06
UTC ·
(4 days ago)
Observed scanned 154 known-sensitive endpoint(s), e.g.: /%2eenv, /*.auto.tfvars, /....//....//....//..../.env, /....//....//....//..../proc/self/environ, /.//.env, /.aws/credentials%3F.txt
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:01:17
UTC ·
(5 days ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇸🇬
Cloudkul Cloudkul
2026-11-06 21:19:41
UTC ·
(5 days ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-11-06 21:06:53
UTC ·
(5 days ago)
{"level":"info","ts":1793999212.5631576,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.122.5.2","remote_port":"36558","client_ip":"34.122.5.2","proto":"HTTP/2.0","method":"GET","host":"status.caast.tv","uri":"/%2E% ...
show more
{"level":"info","ts":1793999212.5631576,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.122.5.2","remote_port":"36558","client_ip":"34.122.5.2","proto":"HTTP/2.0","method":"GET","host":"status.caast.tv","uri":"/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env","headers":{"X-Custom-Ip-Authorization":["172.30.238.186"],"X-Remote-Ip":["172.30.238.186"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Real-Ip":["172.30.238.186"],"Accept-Encoding":["gzip"],"X-Remote-Addr":["172.30.238.186"],"X-Originating-Ip":["172.30.238.186"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"],"Cluster-Client-Ip":["172.30.238.186"],"True-Client-Ip":["172.30.238.186"],"Forwarded":["for=172.30.238.186"],"X-Client-Ip":["172.30.238.186"],"Accept":["*/*"],"X-Forwarded-For":["172.3
...
show less
DDoS Attack
Web App Attack
🇺🇸
jhuisi
2026-11-06 19:22:28
UTC ·
(5 days ago)
Mod Security Hit
Web App Attack
🇫🇷
Stara
2026-11-06 19:04:51
UTC ·
(5 days ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
🇩🇪
Marc
2026-11-06 15:44:13
UTC ·
(5 days ago)
34.122.5.2 - - [06/Nov/2026:16:44:12 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.122.5.2 - - [06/Nov/2026:16:44:12 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla ...
show more
34.122.5.2 - - [06/Nov/2026:16:44:12 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.122.5.2 - - [06/Nov/2026:16:44:12 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.122.5.2 - - [06/Nov/2026:16:44:12 +0100] "GET /webhooks HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force
🇳🇦
jacqueskruger
2026-11-06 15:43:56
UTC ·
(5 days ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 280 confirmed alerts / 281 triggering events. Detections: crowdsecurity/vpatch-CVE-2025-29927, high-confidence-scanner. Latest evidence UTC: 2026-11-06T15:33:23Z. Evi ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 280 confirmed alerts / 281 triggering events. Detections: crowdsecurity/vpatch-CVE-2025-29927, high-confidence-scanner. Latest evidence UTC: 2026-11-06T15:33:23Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
🇩🇪
rh24
2026-11-06 09:04:14
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.122.5.2 (US/United States/2.5.122.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
🇳🇱
mieg
2026-11-06 07:58:27
UTC ·
(5 days ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-06 07:07:47
UTC ·
(5 days ago)
[ti-17al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 34.122.5.2 - - [06/Nov/2026:08:07:38 +0100] "GET /z9x8c7v6b5-debug-trigger-store.mzoem.nl HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWe ...
show more
[ti-17al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 34.122.5.2 - - [06/Nov/2026:08:07:38 +0100] "GET /z9x8c7v6b5-debug-trigger-store.mzoem.nl HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.122.5.2 - - [06/Nov/2026:08:07:38 +0100] "GET /2jjokay9o52betd1bsc2 HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.122.5.2 - - [06/Nov/2026:08:07:38 +0100] "GET /4ms18x4qhcemuxyf6ltb HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.122.5.2 - - [06/Nov/2026:08:07:38 +0100] "POST /graphql HTTP/2.0" 404 2020 "https://store.mzoem.nl" "Mozill
...
show less
Bad Web Bot
Web App Attack
🇫🇷
francoisunix
2026-11-06 01:35:55
UTC ·
(6 days ago)
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET /robots.txt HTTP ...
show more
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET /robots.txt HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET /sitemap.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET /sitemap_index.xml HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.122.5.2 - - [06/Nov/2026:01:35:52 +0000] "GET /z9x8c7v6b5-debug-trigger-test.eco-conscient.com HTTP/1.1" 444 0 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
🇫🇮
mickp
2026-11-05 21:36:44
UTC ·
(6 days ago)
34.122.5.2 - - [05/Nov/2026:21:36:40 +0000] "GET / HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.122.5.2 - - [05/Nov/2026:21:36:40 +0000] "GET /robots ...
show more
34.122.5.2 - - [05/Nov/2026:21:36:40 +0000] "GET / HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.122.5.2 - - [05/Nov/2026:21:36:40 +0000] "GET /robots.txt HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.122.5.2 - - [05/Nov/2026:21:36:40 +0000] "GET /sitemap.xml HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.122.5.2 - - [05/Nov/2026:21:36:41 +0000] "GET /sitemap_index.xml HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.122.5.2 - - [05/Nov/2026:21:36:41 +0000] "GET /manifest.json HTTP/1.1" 200 2467 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.122.5.2 - - [05/Nov/2026
...
show less
Bad Web Bot
Web App Attack