Anonymous
2026-11-09 18:41:38
UTC ·
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-11-09 17:45:28
UTC ·
(2 days ago)
🤡 Fake Bingbot crawler detected. The IP used the Bing bot user-agent but does not belong to Bing's verified crawler IP ranges.
Bad Web Bot
🇺🇸
IndigoRidge
2026-11-09 17:22:34
UTC ·
(2 days ago)
34.141.120.48 - - [09/Nov/2026:12:22:34 -0500] "GET /packages/api/.env HTTP/1.1" 403 5626 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.141.120.48 - - [09/Nov/2026:12:22:34 -0500] "GET /packages/database/.env HTTP/1.1" 403 ...
show more
34.141.120.48 - - [09/Nov/2026:12:22:34 -0500] "GET /packages/api/.env HTTP/1.1" 403 5626 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.141.120.48 - - [09/Nov/2026:12:22:34 -0500] "GET /packages/database/.env HTTP/1.1" 403 5626 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.141.120.48 - - [09/Nov/2026:12:22:34 -0500] "GET /apps/docs/.env HTTP/1.1" 403 5626 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
🇫🇷
dynamix
2026-11-09 16:27:54
UTC ·
(2 days ago)
Multiple WAF Violations
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 14:56:17
UTC ·
(2 days ago)
cloudlinux2 fail2ban: 2026-11-09 15:50:02,344 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 88.242.136.29 - 2026-11-09 15:50:01cloudlinux2 fail2ban: 2026-11-09 15:50:35,106 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-11-09 15:50:02,344 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 88.242.136.29 - 2026-11-09 15:50:01cloudlinux2 fail2ban: 2026-11-09 15:50:35,106 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Ban 34.141.120.48cloudlinux2 fail2ban: 2026-11-09 15:50:34,948 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 15:50:34cloudlinux2 fail2ban: 2026-11-09 15:50:35,058 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 15:50:35cloudlinux2 fail2ban: 2026-11-09 15:50:35,084 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 15:50:35cloudlinux2 fail2ban: 2026-11-09 15:50:35,031 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 15:50:35cloudlinux2 fail2ban: 2026-11-09 15:50:35,139 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 15:50:35cloudlinux2 fail2ban:
show less
Web App Attack
🇬🇧
WebNiraj
2026-11-09 14:31:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:9900002) triggered by 34.141.120.48 (DE/Germany/48.120.141.34.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
Brute-Force
🇫🇷
masterguru
2026-11-09 13:27:22
UTC ·
(2 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-197)
Bad Web Bot
🇫🇷
masterguru
2026-11-09 10:51:08
UTC ·
(2 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .d ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
🇷🇴
clauss
2026-11-09 09:46:38
UTC ·
(2 days ago)
34.141.120.48 - - [09/Nov/2026:11:46:37 +0200] "GET /.env.prod.local HTTP/2.0" 403 34 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.141.120.48 - - [09/Nov/2026:11:46:37 +0200] "GET /.env.development ...
show more
34.141.120.48 - - [09/Nov/2026:11:46:37 +0200] "GET /.env.prod.local HTTP/2.0" 403 34 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.141.120.48 - - [09/Nov/2026:11:46:37 +0200] "GET /.env.development HTTP/2.0" 403 34 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Web App Attack
🇺🇸
aldo
2026-11-09 09:16:05
UTC ·
(2 days ago)
20 request(s) in 24h for 19 sensitive path(s) that do not exist on this site (e.g. //.env, /....//....//....//..../.env, /.aws/credentials%3F.txt). Automated report from a passive sensor: https://digimasi.com/en/research/methodology/
Web App Attack
Bad Web Bot
Anonymous
2026-11-09 09:02:48
UTC ·
(2 days ago)
🚨 Repeated automated attempts to access prohibited paths and exploit known web application vulnerabilities.
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-09 08:53:56
UTC ·
(2 days ago)
[09/Nov/2026:03:53:55.981345 --0500] avGKI-4I5XvNAA7HKj0JEwAAAIA 34.141.120.48 59272 205.233.18.17 7081
[09/Nov/2026:03:53:56.454097 --0500] avGKJIJKmIPa3tEcna5qlAAAAFc 34.141.120.48 42824 205.233.18.17 7081
[09/Nov/2026:03:53:56.471499 --0500] avGKJ ...
show more
[09/Nov/2026:03:53:55.981345 --0500] avGKI-4I5XvNAA7HKj0JEwAAAIA 34.141.120.48 59272 205.233.18.17 7081
[09/Nov/2026:03:53:56.454097 --0500] avGKJIJKmIPa3tEcna5qlAAAAFc 34.141.120.48 42824 205.233.18.17 7081
[09/Nov/2026:03:53:56.471499 --0500] avGKJJHke0F1xe2zPSqr@gAAABM 34.141.120.48 42862 205.233.18.17 7081
[09/Nov/2026:03:53:56.471841 --0500] avGKJJHke0F1xe2zPSqr@wAAAAk 34.141.120.48 42852 205.233.18.17 7081
[09/Nov/2026:03:53:56.473128 --0500] avGKJJHke0F1xe2zPSqr-AAAAAM 34.141.120.48 42858 205.233.18.17 7081
...
show less
Hacking
🇮🇹
VHosting
2026-11-09 08:35:06
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 08:08:56
UTC ·
(2 days ago)
cloudlinux2 fail2ban: 2026-11-09 09:04:40,268 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-11-09 09:04:40,320 fail2ban.filter [1667]: INFO [plesk-modsecurit ...
show more
cloudlinux2 fail2ban: 2026-11-09 09:04:40,268 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-11-09 09:04:40,320 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-11-09 09:04:40,294 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-11-09 09:04:39,942 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:39cloudlinux2 fail2ban: 2026-11-09 09:04:40,274 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Ban 34.141.120.48cloudlinux2 fail2ban: 2026-11-09 09:04:40,349 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-11-09 09:04:40,275 fail2ban.filter [1667]: INFO [recidive] Found 34.141.120.48 - 2026-11-09 09:04:40cloudlinux2 fail2ban: 2026-1
show less
Brute-Force
Anonymous
2026-11-09 07:50:42
UTC ·
(2 days ago)
| Common web attack.
Web App Attack
Hacking
SQL Injection