๐ณ๐ฑ
Alt255
2026-10-27 04:27:34
(4 hours ago)
[ti-01ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.production.local HTTP/1.1" 404 2121 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; PerplexityBot/1.0\; +https://perplexity.ai/perplexitybot\)"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.dev.local HTTP/1.1" 403 5937 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.credentials HTTP/1.1" 404 7424 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.supabase HTTP/1.1" 404 7424 "-" "Mozilla/5.0 \(compat
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฆ
jacqueskruger
2026-10-26 13:21:22
(19 hours ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 211 confirmed al ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 211 confirmed alerts / 212 triggering events. Detections: candor/high-confidence-scanner, crowdsecurity/vpatch-CVE-2025-29927. Latest evidence UTC: 2026-10-26T08:52:03Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-26 08:45:07
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.147.1.234 (234.1.147.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.1.234 (234.1.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 04:45:01.911424 2026] [security2:error] [pid 31484:tid 31484] [client 34.147.1.234:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.kryptonome.com"] [uri "/.git/config"] [unique_id "at8TDRk35wf57fy2GXPr3gAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฆ
BenTahily
2026-10-26 07:01:19
(1 day ago)
Malicious activity against marketblitzer.com (BLITZER Trading Platform)
Web App Attack
Hacking
Anonymous
2026-10-25 21:06:26
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Back ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
Marten Mark
2026-10-25 11:07:01
(1 day ago)
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 4 ...
show more
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /z9x8c7v6b5-debug-trigger-blog.cfi.co HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /hlzzgfypuhxonxjkxwpy HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /hlzzgfypuhxonxjkxwpy HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /ngsw.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /ngsw.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.147.1.234 - - [25/Oct/2026:11:06:54 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 5334
...
show less
Port Scan
Web App Attack
Anonymous
2026-10-25 04:42:12
(2 days ago)
Bot / seems abusive / Apache connections: 23
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-25 03:49:17
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
๐ฉ๐ช
bazter.pro
2026-10-25 03:12:09
(2 days ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 02:02:18
(2 days ago)
[ti-01ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.production.local HTTP/1.1" 404 2121 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; PerplexityBot/1.0\; +https://perplexity.ai/perplexitybot\)"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.dev.local HTTP/1.1" 403 5937 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.credentials HTTP/1.1" 404 7424 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
34.147.1.234 - - \[25/Oct/2026:03:01:56 +0100\] "GET /.env.supabase HTTP/1.1" 404 7424 "-" "Mozilla/5.0 \(compat
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-25 00:33:04
(2 days ago)
34.147.1.234 - - [25/Oct/2026:01:33:03 +0100] "GET /secrets.yml HTTP/2.0" 302 50 "-" "Mozilla/5.0 (L ...
show more
34.147.1.234 - - [25/Oct/2026:01:33:03 +0100] "GET /secrets.yml HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐ซ๐ฎ
Christopher Hughes
2026-10-25 00:11:33
(2 days ago)
34.147.1.234 - - [25/Oct/2026:01:11:32 +0100] "GET /compose.yml HTTP/2.0" 302 50 "-" "Mozilla/5.0 (L ...
show more
34.147.1.234 - - [25/Oct/2026:01:11:32 +0100] "GET /compose.yml HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
๐บ๐ธ
Michael DEBILLY
2026-10-24 23:42:33
(2 days ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-24T23:26:44.000Z.
Web App Attack
Anonymous
2026-10-24 23:39:28
(2 days ago)
Aggressive web scan
Web App Attack
๐ฉ๐ช
konseptit
2026-10-24 22:49:08
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.147.1.234 (234.1.147.34.bc.googleuse ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.147.1.234 (234.1.147.34.bc.googleusercontent.com)
show less
SQL Injection