🇸🇬
WMK965
2026-11-06 08:30:19
UTC ·
(1 day ago)
Too many illegitimate requests
IP: 34.143.157.44
Time: 06/Nov/2026:16:30:18 +0800
Activities:
"GET /sitemap_index.xml HTTP/2.0" 404 1360 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity ...
show more
Too many illegitimate requests
IP: 34.143.157.44
Time: 06/Nov/2026:16:30:18 +0800
Activities:
"GET /sitemap_index.xml HTTP/2.0" 404 1360 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
"GET /fyx4zlljgs7wowz9ziwf HTTP/2.0" 404 1360 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
"GET /z9x8c7v6b5-debug-trigger-api.[DOMAIN] HTTP/2.0" 404 1360 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
"GET /abcrniho54vvhfe3cr89 HTTP/2.0" 404 1360 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
"POST /graphql HTTP/2.0" 404 1360 "https://api.[DOMAIN]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
Bad Web Bot
Web App Attack
🇳🇱
Cyber SOC
2026-11-06 08:19:46
UTC ·
(1 day ago)
Peaksys - 2026-11-06 08:19:21 UTC+00
Port Scan
🇨🇳
WMK965
2026-11-06 07:29:57
UTC ·
(2 days ago)
Too many illegitimate requests
IP: 34.143.157.44
Time: 06/Nov/2026:15:29:54 +0800
Activities:
"GET /sitemap_index.xml HTTP/2.0" 404 150 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
"GET /ldt4w3b6aelw4dns2czy ...
show more
Too many illegitimate requests
IP: 34.143.157.44
Time: 06/Nov/2026:15:29:54 +0800
Activities:
"GET /sitemap_index.xml HTTP/2.0" 404 150 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
"GET /ldt4w3b6aelw4dns2czy HTTP/2.0" 404 150 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
"GET /api-keys HTTP/2.0" 404 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
"GET /checkout HTTP/2.0" 404 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
"GET /settings/billing HTTP/2.0" 404 552 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
[truncated]
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 05:29:48
UTC ·
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
rubixstudios
2026-11-06 05:22:02
UTC ·
(2 days ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇹🇷
Jova
2026-11-06 04:37:43
UTC ·
(2 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
Anonymous
2026-11-06 04:11:52
UTC ·
(2 days ago)
(PERMBLOCK) 34.143.157.44 (SG/Singapore/-/Singapore/44.157.143.34.bc.googleusercontent.com/[redacted]) has had more than 6 temp blocks
Hacking
🇪🇸
el-brujo
2026-11-06 03:48:11
UTC ·
(2 days ago)
06/Nov/2026:04:48:10.441873 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.143.157.44] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\\\\\.\\\\\\\\./" at REQUEST_URI. [file "/etc/httpd/conf.d/mod_se ...
show more
06/Nov/2026:04:48:10.441873 +0100Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.143.157.44] ModSecurity: Access denied with code 406 (phase 2). Pattern match "\\\\\\\\.\\\\\\\\./" at REQUEST_URI. [file "/etc/httpd/conf.d/mod_security.conf"] [line "127"] [id "500002"] [hostname "hwagm.elhacker.net"] [uri "/laravel../config/database.php"] [unique_id "au1N-hELkgSRz3x1SrdugQAOvT8"]
...
show less
Hacking
Web App Attack
🇪🇸
el-brujo
2026-11-06 02:44:44
UTC ·
(2 days ago)
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 226 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /appearance/../../. ...
show more
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /appearance/../../proc/self/environ HTTP/2.0" 400 226 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /appearance/../../.env HTTP/2.0" 400 226 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.143.157.44 - - [06/Nov/2026:03:44:43 +0100] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.143.157.44 - - [06/Nov/2026:03:44:43
...
show less
DDoS Attack
Hacking
Anonymous
2026-11-06 02:18:33
UTC ·
(2 days ago)
Web App Attack
🇧🇪
cmbplf
2026-11-06 01:28:43
UTC ·
(2 days ago)
8.749 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇲🇾
Rizzy
2026-11-06 00:28:17
UTC ·
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-11-06 00:08:08
UTC ·
(2 days ago)
Aggressive web search of vulnerable pages: /assets../.env /public../.env /dist../.env /build../.env /static//.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 21:13:14
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.143.157.44 (44.157.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:13:11.901390 2026] [security2:error] [pid 28827:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.143.157.44 (44.157.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:13:11.901390 2026] [security2:error] [pid 28827:tid 28827] [client 34.143.157.44:46994] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.stevestoyostove.com"] [uri "/.env.monorepo"] [unique_id "auzxZ91dDDdvcDmQZnc4JwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-05 21:09:55
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on orcus
Brute-Force
Bad Web Bot
Web App Attack