🇧🇷
radardatelecom
2026-10-22 14:18:03
(15 hours ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
Mundo Bueno
2026-10-22 14:17:34
(15 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env.production.local [RATE LIMITED - 1800s quarantine] ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /.env.production.local [RATE LIMITED - 1800s quarantine] | Pays: SG | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/
show less
Hacking
Web App Attack
🇩🇪
conseilgouz
2026-10-22 14:16:40
(15 hours ago)
gie-88 : Bloc AI bots=>/robots.txt(anthropic)
Hacking
🇬🇧
consul.to
2026-10-22 13:55:15
(15 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
IVski.com
2026-10-22 01:09:52
(1 day ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack
🇩🇪
akasolutions.de
2026-10-21 19:58:04
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.124.138.175 (SG/Singapore/175.138.12 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.124.138.175 (SG/Singapore/175.138.124.34.bc.googleusercontent.com)
show less
SQL Injection
🇵🇹
WebTejo
2026-10-21 19:51:47
(1 day ago)
Detected multiple authentication failures and invalid user attempts in LF_CPANEL from IP address 34. ...
show more
Detected multiple authentication failures and invalid user attempts in LF_CPANEL from IP address 34.124.138.175 on [PT] Tucano Node.
show less
Brute-Force
SSH
🇦🇺
aranguren.org
2026-10-21 15:47:53
(1 day ago)
34.124.138.175 - - [22/Oct/2026:02:47:52 +1100] "GET / HTTP/2.0" 400 13560 "-" "Mozilla/5.0 (Linux; ...
show more
34.124.138.175 - - [22/Oct/2026:02:47:52 +1100] "GET / HTTP/2.0" 400 13560 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.124.138.175 - - [22/Oct/2026:02:47:52 +1100] "POST /lib/terminal-xhr.php HTTP/2.0" 404 995 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.124.138.175 - - [22/Oct/2026:02:47:52 +1100] "GET /z9x8c7v6b5-debug-trigger-nextcloud.aranguren.org HTTP/2.0" 404 995 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
🇧🇷
ICS Labs
2026-10-21 14:39:38
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-21 UTC.
Hacking
🇺🇸
TPI-Abuse
2026-10-21 10:17:51
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.124.138.175 (175.138.124.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.138.175 (175.138.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:17:43.658833 2026] [security2:error] [pid 15050:tid 15050] [client 34.124.138.175:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.antitribu.com"] [uri "/@fs/app/.env"] [unique_id "atiRR8MQZwSJ98f6uD7-rgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-10-21 09:35:05
(1 day ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
🇳🇱
Alt255
2026-10-21 07:59:33
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.124.138.175 - - [21/Oct/2026:09:59:22 +0200] "GET /static//.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
dot.mg
2026-10-21 07:46:23
(1 day ago)
Scan of vulnerable files
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 07:27:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.124.138.175 (175.138.124.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.138.175 (175.138.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 03:27:51.023153 2026] [security2:error] [pid 2898:tid 2898] [client 34.124.138.175:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ard.global"] [uri "/.env.config"] [unique_id "athpd9Xc3iKc4P3etzkjAQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-21 07:18:38
(1 day ago)
Crawler ignoring refusals | ua: CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; A ...
show more
Crawler ignoring refusals | ua: CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot), Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+10 more) | path: /lib/terminal-xhr.php, /khy3jtjjdzq8lq2hk0hs, /dist/.vite/manifest.json (+17 more)
show less
Bad Web Bot