🇧🇷
Peregrine
2026-10-28 03:10:29
UTC ·
(2 weeks ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:38 -0300] "GET /.env.keys HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.production.local HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.dev.local HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.secret HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.credentials HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
show less
Bad Web Bot
🇺🇸
blizzard
2026-10-26 13:08:20
UTC ·
(2 weeks ago)
Unauthorized HTTP/2 POST /api/auth blocked by Managed rules: (ASN: 396982) (Network: Google LLC) (Method: POST) (Path: /api/auth) (Query: ) (User Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perple ...
show more
Unauthorized HTTP/2 POST /api/auth blocked by Managed rules: (ASN: 396982) (Network: Google LLC) (Method: POST) (Path: /api/auth) (Query: ) (User Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot))
show less
Brute-Force
Web App Attack
🇨🇭
4server
2026-10-26 13:06:47
UTC ·
(2 weeks ago)
[MonOct2614:06:44.3111562026][security2:error][pid2043224:tid2043250][client34.146.117.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"proc/self/\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][i ...
show more
[MonOct2614:06:44.3111562026][security2:error][pid2043224:tid2043250][client34.146.117.243:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Matchedphrase\"proc/self/\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"135\"][id\"344360\"][rev\"5\"][msg\"Atomicorp.comWAFRules:UnauthorizedOperatingSystemFileAccessAttempt\"][data\"MatchedData:proc/self/foundwithinARGS:0:{\\\\x22then\\\\x22:\\\\x22\$1:__proto__:then\\\\x22\,\\\\x22status\\\\x22:\\\\x22resolved_model\\\\x22\,\\\\x22reason\\\\x22:-1\,\\\\x22value\\\\x22:\\\\x22{/\\\\x22then/\\\\x22:/\\\\x22\$b1337/\\\\x22}\\\\x22\,\\\\x22_response\\\\x22:{\\\\x22_prefix\\\\x22:\\\\x22process.mainmodule.require\(\'child_process\'\).execsync\(\'env2\>/dev/null\|\|cat/proc/self/environ2\>/dev/null\'\)\;\\\\x22\,\\\\x22_formdata\\\\x22:{\\\\x22get\\\\x22:\\\\x22\$1:constructor:constructor\\\\x22}}}\"][severity\"CRITICAL\"][tag\"attack-lfi\"][hostname\"walter-worndli.ch\"][uri\"/\"][unique_id\"at9QZH5HziyF7Fd-PnzO8gAAAA8\"]
show less
Hacking
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-26 13:03:42
UTC ·
(2 weeks ago)
Sensitive File Scan
Web App Attack
🇫🇷
Hiigara
2026-10-26 12:31:07
UTC ·
(2 weeks ago)
connection attempt : 34.146.117.243 on port : tcp/8080 (HTTP-alt)
Port Scan
🇲🇾
Rizzy
2026-10-26 03:50:51
UTC ·
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇧🇷
Peregrine
2026-10-26 03:10:53
UTC ·
(2 weeks ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.gitlab-ci.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:36 -0300] "GET /.github/workflows/deploy.yml HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:38 -0300] "GET /.env.keys HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.production.local HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.dev.local HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.secret HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.env.credentials HTTP/1.1" 404 414
34.146.117.243 172.71.8.78 - - [24/Oct/2026:11:25:39 -0300] "GET /.ssh/id_ed25519 HTTP/1.1" 404 414
show less
Bad Web Bot
Anonymous
2026-10-26 00:30:07
UTC ·
(2 weeks ago)
CrowdSec decision: crowdsecurity/http-crawl-non_statics (origin: crowdsec)
Port Scan
Anonymous
2026-10-25 22:30:04
UTC ·
(2 weeks ago)
CrowdSec decision: crowdsecurity/http-bad-user-agent (origin: crowdsec)
Port Scan
🇩🇪
rh24
2026-10-25 22:07:33
UTC ·
(2 weeks ago)
(badbots) Bad bot user-agent [redacted] from 34.146.117.243 (JP/Japan/243.117.146.34.bc.googleusercontent.com)
Hacking
🇩🇪
ger-stg-sifi1
2026-10-25 22:02:37
UTC ·
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-10-25 19:30:06
UTC ·
(2 weeks ago)
CrowdSec decision: LePresidente/http-generic-403-bf (origin: crowdsec)
Port Scan
🇺🇦
URAN Publishing Service
2026-10-25 09:45:25
UTC ·
(2 weeks ago)
[25/Oct/2026:11:45:24 +0200] -- 34.146.117.243 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /assets/manifest.json HTTP/1.1
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-10-25 05:38:40
UTC ·
(2 weeks ago)
Many_bad_calls
Web App Attack
🇺🇸
francelink.fr
2026-10-25 05:26:32
UTC ·
(2 weeks ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T12:49:10.000Z.
Web App Attack