๐ฉ๐ช
klaus_ph
2026-09-22 18:26:45
(1 day ago)
2026-09-22 02:29:30,407 fail2ban.actions [3721954]: NOTICE [apache-auth] Ban 34.143.193.168
...
show more
2026-09-22 02:29:30,407 fail2ban.actions [3721954]: NOTICE [apache-auth] Ban 34.143.193.168
...
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-09-21 22:55:25
(1 day ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.143.193.168 - - [22/Sep/2026:00:55:24 +0200] "GET /api/config HTTP/2.0" 404 1916 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.143.193.168 - - [22/Sep/2026:00:55:24 +0200] "GET /__/firebase/init.json HTTP/2.0" 404 1857 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.143.193.168 - - [22/Sep/2026:00:55:24 +0200] "GET /api/settings HTTP/2.0" 404 1857 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.143.193.168 - - [22/Sep/2026:00:55:24 +0200] "GET /config.json HTTP/2.0" 404 1857 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 21:49:00
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.143.193.168 (168.193.143.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.143.193.168 (168.193.143.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 17:48:53.776990 2026] [security2:error] [pid 9619:tid 9619] [client 34.143.193.168:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.assistguide.net"] [uri "/.env.local"] [unique_id "arGmRd7VEIFHryRaZlsnWAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
noise.agency
2026-09-21 20:37:58
(1 day ago)
34.143.193.168 (SG/Singapore/168.193.143.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
Anonymous
2026-09-21 19:30:02
(1 day ago)
suspicious request in access.log
Web App Attack
๐ซ๐ท
IRISIO
2026-09-21 16:58:21
(2 days ago)
scans/SQL injection/spam posts : 4483 queries
Web App Attack
SQL Injection
๐บ๐ธ
abenage
2026-09-21 14:54:00
(2 days ago)
34.143.193.168 - - [21/Sep/2026:08:53:59 -0600] "GET /m2bd0pq1shobtl7p0ntv HTTP/2.0" 404 162 "https: ...
show more
34.143.193.168 - - [21/Sep/2026:08:53:59 -0600] "GET /m2bd0pq1shobtl7p0ntv HTTP/2.0" 404 162 "https://www.[redacted]/m2bd0pq1shobtl7p0ntv" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-21 14:50:03
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-21 14:21:39
(2 days ago)
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /.next/.env HTTP/2.0" 404 306 "-" "Mozilla/5.0 ...
show more
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /.next/.env HTTP/2.0" 404 306 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /api/account HTTP/2.0" 404 306 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /client/.env HTTP/2.0" 404 306 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /app/.env HTTP/2.0" 403 308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email])"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /data/.env HTTP/2.0" 404 306 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /environment.js HTTP/2.0" 404 306 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.143.193.168 - - [21/Sep/2026:16:21:36 +0200] "GET /dist/.env
show less
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-09-21 13:23:55
(2 days ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.143.193.168 - - [21/Sep/2026:15:23:43 +0200] "GET /.aws/credentials HTTP/2.0" 404 1422 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
IRISIO
2026-09-21 12:37:33
(2 days ago)
scans/SQL injection/spam posts : 2555 queries
Web App Attack
SQL Injection
๐ฎ๐น
VHosting
2026-09-21 12:35:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฌ๐ง
bensmithurst
2026-09-21 12:32:43
(2 days ago)
34.143.193.168 - - [21/Sep/2026:12:32:40 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.143.193 ...
show more
34.143.193.168 - - [21/Sep/2026:12:32:40 +0000] "GET /..%2f.env HTTP/1.1" 400 150 "-" "-"
34.143.193.168 - - [21/Sep/2026:12:32:41 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 150 "-" "-"
34.143.193.168 - - [21/Sep/2026:12:32:41 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 150 "-" "-"
34.143.193.168 - - [21/Sep/2026:12:32:43 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-"
34.143.193.168 - - [21/Sep/2026:12:32:43 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 150 "-" "-"
... [host=LAN***]
show less
Web App Attack
๐ซ๐ท
IRISIO
2026-09-21 12:15:32
(2 days ago)
scans/SQL injection/spam posts : 2189 queries
Web App Attack
SQL Injection
๐ณ๐ด
Abuse Buster
2026-09-21 11:56:07
(2 days ago)
34.143.193.168 - [21/Sep/2026:13:56:04 +0200] "GET /mlsd6bkachltcwowx6ph HTTP/2.0" 404 1862 "-" "Moz ...
show more
34.143.193.168 - [21/Sep/2026:13:56:04 +0200] "GET /mlsd6bkachltcwowx6ph HTTP/2.0" 404 1862 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.143.193.168 - [21/Sep/2026:13:56:04 +0200] "POST /api/v1/validate/code HTTP/2.0" 404 1862 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
34.143.193.168 - [21/Sep/2026:13:56:05 +0200] "GET /76xxkmokq8ysseyvdyec HTTP/2.0" 404 1862 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Web App Attack