🇵🇹
Subnet Shadow Specter
2026-11-06 21:32:53
UTC ·
(2 days ago)
[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1. ...
show more
[CRITICAL][Security Alert] Preemptive block enforced through ASN lookup (AbuseIPDB score > 90%). Access immediately revoked. [Method]: => GET [Request]: / [User-Agent]: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) [OS]: Unknown [IP]: 34.179.197.90 [IoA Datetime]: 2026-11-06 05:56:57 UTC +1.
show less
Bad Web Bot
Brute-Force
Hacking
Port Scan
Web App Attack
🇳🇱
Roderic
2026-11-06 10:00:26
UTC ·
(3 days ago)
Insights: web vulnerability probing, 74 requests on 1 site, e.g. /.env.example, /.env, /dist../.env (rotating 29 fake bot names, e.g. Browser via Google Cloud, Kimi-SearchBot, Meta-ExternalF
Web App Attack
Anonymous
2026-11-06 06:06:05
UTC ·
(3 days ago)
Automatically blocked after 60 security events. Observed sensitive configuration-file probes. Source: Cloudflare security controls.
Hacking
Bad Web Bot
Web App Attack
🇬🇧
Marten Mark
2026-11-06 05:37:53
UTC ·
(3 days ago)
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.179.197.90 - - [06/Nov/2026:05:3 ...
show more
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /ngsw.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.179.197.90 - - [06/Nov/2026:05:37:52 +0000] "GET /ngsw.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome
...
show less
Port Scan
Web App Attack
Anonymous
2026-11-06 03:58:08
UTC ·
(3 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇺🇸
TPI-Abuse
2026-11-06 03:28:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.179.197.90 (90.197.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:28:00.009042 2026] [security2:error] [pid 29187:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.197.90 (90.197.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 22:28:00.009042 2026] [security2:error] [pid 29187:tid 29187] [client 34.179.197.90:41256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.buckinghambar.com"] [uri "/.env.prod.bak"] [unique_id "au1JQBVuSI4gLEQ4CZbG9gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
Christopher Hughes
2026-11-06 03:06:56
UTC ·
(3 days ago)
34.179.197.90 - - [06/Nov/2026:03:06:56 +0000] "GET /js../.env HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +h ...
show more
34.179.197.90 - - [06/Nov/2026:03:06:56 +0000] "GET /js../.env HTTP/2.0" 302 50 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
🇮🇹
CoreTech srl
2026-11-06 02:34:19
UTC ·
(3 days ago)
cloudlinux2 fail2ban: 2026-11-06 03:28:46,396 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 46.101.58.176 - 2026-11-06 03:28:46cloudlinux2 fail2ban: 2026-11-06 03:28:57,360 fail2ban.actions [1800]: NOTICE [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-11-06 03:28:46,396 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 46.101.58.176 - 2026-11-06 03:28:46cloudlinux2 fail2ban: 2026-11-06 03:28:57,360 fail2ban.actions [1800]: NOTICE [plesk-modsecurity] Unban 136.107.231.172cloudlinux2 fail2ban: 2026-11-06 03:29:09,387 fail2ban.actions [1800]: NOTICE [plesk-modsecurity] Unban 35.187.191.25cloudlinux2 fail2ban: 2026-11-06 03:29:09,554 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 46.101.58.176 - 2026-11-06 03:29:09cloudlinux2 fail2ban: 2026-11-06 03:29:48,792 fail2ban.filter [1800]: INFO [plesk-wordpress] Found 46.101.58.176 - 2026-11-06 03:29:48cloudlinux2 fail2ban: 2026-11-06 03:29:49,495 fail2ban.filter [1800]: INFO [recidive] Found 46.101.58.176 - 2026-11-06 03:29:49cloudlinux2 fail2ban: 2026-11-06 03:29:49,361 fail2ban.actions [1800]: NOTICE [plesk-wordpress] Ban 46.101.58.176cloudlinux2 fail2ban: 2026-11-06 03:30:02,058 fail2ban.actions [1800]:
show less
Web App Attack
🇫🇮
Christopher Hughes
2026-11-06 02:22:12
UTC ·
(3 days ago)
34.179.197.90 - - [06/Nov/2026:02:22:11 +0000] "GET /sitemap_index.xml HTTP/2.0" 302 73 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Web App Attack
🇬🇧
cg-design.co.uk
2026-11-06 01:40:33
UTC ·
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.179.197.90 (DE/Germany/90.197.179.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
FD-IX
2026-11-06 00:27:26
UTC ·
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-06 00:10:56
UTC ·
(3 days ago)
7.688 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇬🇧
Aetherweb Ark
2026-11-06 00:02:05
UTC ·
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 34.179.197.90 (DE/Germany/90.197.179.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇳🇦
jacqueskruger
2026-11-05 23:55:55
UTC ·
(3 days ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 34 confirmed alerts / 34 triggering events. Detections: crowdsecurity/vpatch-CVE-2025-29927. Latest evidence UTC: 2026-11-05T23:55:19Z. Evidence: inline WAF rejection ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 34 confirmed alerts / 34 triggering events. Detections: crowdsecurity/vpatch-CVE-2025-29927. Latest evidence UTC: 2026-11-05T23:55:19Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
🇦🇹
penguin-solutions.at
2026-11-05 23:43:00
UTC ·
(3 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack