๐ฉ๐ช
rh24
2026-10-26 05:10:59
(28 minutes ago)
(badbots) Bad bot user-agent [redacted] from 34.151.253.1 (BR/Brazil/1.253.151.34.bc.googleuserconte ...
show more
(badbots) Bad bot user-agent [redacted] from 34.151.253.1 (BR/Brazil/1.253.151.34.bc.googleusercontent.com)
show less
Hacking
๐ฉ๐ช
wassita
2026-10-26 04:47:36
(52 minutes ago)
automated scan probing for sensitive/config files โ requested path: /.env.local?raw โ response: 404
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-26 04:33:36
(1 hour ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.151.253.1 - - [26/Oct/2026:05:33:17 +0100] "GET /7y0bexlpc2ul7kbhi9x7 HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.151.253.1 - - [26/Oct/2026:05:33:17 +0100] "GET /z9x8c7v6b5-debug-trigger-websels.com HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.151.253.1 - - [26/Oct/2026:05:33:17 +0100] "GET /samuz9hp1xlt3l7vxkz8 HTTP/1.1" 404 2110 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.151.253.1 - - [26/Oct/2026:05:33:18 +0100] "GET /push_config.json HTTP/1.1" 404 2083 "-" "Mozilla/5.0
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-26 04:15:31
(1 hour ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-26 04:08:57
(1 hour ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
TAY
2026-10-26 00:12:23
(5 hours ago)
34.151.253.1 - - [26/Oct/2026:08:12:15 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5. ...
show more
34.151.253.1 - - [26/Oct/2026:08:12:15 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.151.253.1 - - [26/Oct/2026:08:12:15 +0800] "GET /_image?href=/../../../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.151.253.1 - - [26/Oct/2026:08:12:16 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 7834 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.151.253.1 - - [26/Oct/2026:08:12:16 +0800] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.151.253.1 - - [26/Oct/2026:08:12:16 +0800] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400
...
show less
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-26 00:07:14
(5 hours ago)
[ti-26al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.151.253.1 - - [26/Oct/2026:01:06:51 +0100] "GET /build/.env HTTP/1.1" 301 576 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.151.253.1 - - [26/Oct/2026:01:06:51 +0100] "GET /docker/.env HTTP/1.1" 301 578 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.151.253.1 - - [26/Oct/2026:01:06:51 +0100] "GET /core/.env HTTP/1.1" 301 574 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.151.253.1 - - [26/Oct/2026:01:06:51 +0100] "GET /.git/HEAD HTTP/1.1" 301 5
...
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-25 23:06:13
(6 hours ago)
34.151.253.1 - - [25/Oct/2026:23:06:04 +0000] "GET /robots.txt HTTP/2.0" 403 195 "-" "Mozilla/5.0 (c ...
show more
34.151.253.1 - - [25/Oct/2026:23:06:04 +0000] "GET /robots.txt HTTP/2.0" 403 195 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-" edge="34.151.253.1"
34.151.253.1 - - [25/Oct/2026:23:06:04 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.151.253.1"
34.151.253.1 - - [25/Oct/2026:23:06:05 +0000] "GET /sitemap_index.xml HTTP/2.0" 403 385 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "-" edge="34.151.253.1"
34.151.253.1 - - [25/Oct/2026:23:06:09 +0000] "GET /build/manifest.json HTTP/2.0" 403 17601 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.151.253.1"
34.151.253.1 - - [25/Oct/2026:23:06:09 +0000] "GET /ngsw.json HTTP/2.0" 403 17600 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.151.253.1"
...
show less
Web App Attack
๐ซ๐ท
masterguru
2026-10-25 22:07:02
(7 hours ago)
Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" ...
show more
Request content type is not allowed by policy. Match of "within %{tx.allowed_request_content_type}" against "TX:content_type" required. (920420-193)
show less
Hacking
Web App Attack
๐บ๐ธ
WizardsToolkit
2026-10-25 21:02:37
(8 hours ago)
tried to access server backup files
Web App Attack
๐ซ๐ท
a.mohamed.go
2026-10-25 19:50:05
(9 hours ago)
Oct 25 21:50:01 sogod [641464]: 34.151.253.1 "GET /sitemap.xml HTTP/1.0" 200 10087/0 0.015 42495 76% ...
show more
Oct 25 21:50:01 sogod [641464]: 34.151.253.1 "GET /sitemap.xml HTTP/1.0" 200 10087/0 0.015 42495 76% 0 - 12
Oct 25 21:50:03 sogod [641464]: 34.151.253.1 "GET /sitemap_index.xml HTTP/1.0" 200 1077/0 0.004 2603 58% 0 - 12
Oct 25 21:50:04 sogod [641463]: 34.151.253.1 "GET /ngsw.json HTTP/1.0" 200 10087/0 0.017 42495 76% 0 - 12
...
show less
Hacking
Web App Attack
๐ช๐ธ
masterguru
2026-10-25 19:39:48
(10 hours ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
๐ซ๐ท
pm33
2026-10-25 19:35:43
(10 hours ago)
Probing for resource vulnerabilities HTTP(S)
Web App Attack
Anonymous
2026-10-25 19:05:02
(10 hours ago)
Web server attack detected by Fail2Ban
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-25 17:22:58
(12 hours ago)
Excessive multi-domain requests
Brute-Force