🇫🇮
Christopher Hughes
2026-10-23 02:23:26
(3 hours ago)
34.156.82.130 - - [23/Oct/2026:03:23:25 +0100] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.en ...
show more
34.156.82.130 - - [23/Oct/2026:03:23:25 +0100] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 302 1171 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-10-23 02:08:18
(3 hours ago)
34.156.82.130 - - [23/Oct/2026:03:08:17 +0100] "GET /.env?.svg?.wasm?init HTTP/2.0" 302 1141 "-" "Mo ...
show more
34.156.82.130 - - [23/Oct/2026:03:08:17 +0100] "GET /.env?.svg?.wasm?init HTTP/2.0" 302 1141 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇩🇪
updown.io
2026-10-23 00:51:45
(4 hours ago)
{"level":"info","ts":1792716704.0338783,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792716704.0338783,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.156.82.130","remote_port":"35546","client_ip":"34.156.82.130","proto":"HTTP/2.0","method":"GET","host":"status.hiltonbreaks.com","uri":"/z9x8c7v6b5-debug-trigger-status.hiltonbreaks.com","headers":{"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.hiltonbreaks.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000134837,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":179
...
show less
DDoS Attack
Web App Attack
🇩🇪
Phenix Info
2026-10-23 00:39:08
(5 hours ago)
SmallGuard.fr/Prestashop Forbidden Ext.
Web App Attack
🇳🇱
Alt255
2026-10-22 21:59:19
(7 hours ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.156.82.130 - - [22/Oct/2026:23:59:17 +0200] "GET /.git/config HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
...
show less
Bad Web Bot
Web App Attack
2026-10-22 21:55:06
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇩🇪
Bedios GmbH
2026-10-22 21:19:01
(8 hours ago)
Scanning for exposed credentials and private keys
Hacking
🇳🇱
Site.eu
2026-10-22 16:30:58
(13 hours ago)
Excessive 404/403 errors
Brute-Force
🇪🇸
pipeline.es
2026-10-22 16:18:57
(13 hours ago)
Web scanning / probing for vulnerable paths | URL: /panel | Evidence: 34.156.82.130 - - [22/Oct/2026 ...
show more
Web scanning / probing for vulnerable paths | URL: /panel | Evidence: 34.156.82.130 - - [22/Oct/2026:18:17:51 +0200] \"GET /panel HTTP/1.1\" 404 203 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0\" | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 15:47:56
(13 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.156.82.130 (130.82.156.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.156.82.130 (130.82.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:47:48.351066 2026] [security2:error] [pid 32215:tid 32215] [client 34.156.82.130:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hondabvi.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hondabvi.com"] [uri "/z9x8c7v6b5-debug-trigger-hondabvi.com"] [unique_id "atowJB7r2UmPempBfFB4lAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-22 15:26:21
(14 hours ago)
[ti-12al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.156.82.130 - - \[22/Oct/2026:17:25:59 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///root/.aws/credentials\&environmentName=rsc HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; +https://cohere.com/crawler\)"
34.156.82.130 - - \[22/Oct/2026:17:25:59 +0200\] "GET /@fs/.env\?import\&\?raw\?\? HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; GPTBot/1.4\; +https://openai.com/gptbot"
34.156.82.130 - - \[22/Oct/2026:17:25:59 +0200\] "GET /@fs/app/.env\?import\&raw\?\? HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
34.156.82.130 - - \[22/
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-10-22 15:09:31
(14 hours ago)
Excessive crawling of non-existent URLs
Bad Web Bot
🇫🇷
dynamix
2026-10-22 15:08:20
(14 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-10-22 15:00:05
(14 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-22 14:52:28
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack