🇺🇸
[email protected]
2026-11-08 19:54:20
UTC ·
(1 day ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 20h38m14s)
Web App Attack
🇳🇱
Alt255
2026-11-06 18:49:50
UTC ·
(3 days ago)
[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.21.255.10 - - [06/Nov/2026:19:49:31 +0100] "GET /z9x8c7v6b5-debug-trigger-usersowned.com HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (comp ...
show more
[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.21.255.10 - - [06/Nov/2026:19:49:31 +0100] "GET /z9x8c7v6b5-debug-trigger-usersowned.com HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.21.255.10 - - [06/Nov/2026:19:49:31 +0100] "GET /9zp4r5y9ce6e255gfd4o HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.21.255.10 - - [06/Nov/2026:19:49:31 +0100] "GET /0axlbne3ac3fql22tgpb HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.21.255.10 - - [06/Nov/2026:19:49:31 +0100] "GET /packages/database/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (c
...
show less
Bad Web Bot
Web App Attack
🇺🇸
kbeezie
2026-11-06 17:43:55
UTC ·
(3 days ago)
34.21.255.10 - - [06/Nov/2026:12:43:54 -0500] "GET /config/default.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.21.255.10 - - [06/Nov/2026:12:43:54 -0500] " ...
show more
34.21.255.10 - - [06/Nov/2026:12:43:54 -0500] "GET /config/default.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.21.255.10 - - [06/Nov/2026:12:43:54 -0500] "GET /config/custom-environment-variables.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.21.255.10 - - [06/Nov/2026:12:43:54 -0500] "GET /nuxt.config.ts HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.21.255.10 - - [06/Nov/2026:12:43:55 -0500] "POST /v1/graphql HTTP/1.1" 429 564 "https://vangodelivery.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
34.21.255.10 - - [06/Nov/2026:12:43:55 -0500] "GET /api/config HTTP/1.1" 429 162 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 17:32:47
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
[email protected]
2026-11-06 16:32:35
UTC ·
(3 days ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 71h59m54s)
Web App Attack
Anonymous
2026-11-06 15:42:09
UTC ·
(3 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-06 14:14:11
UTC ·
(3 days ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.21.255.10 - - [06/Nov/2026:15:13:57 +0100] "GET /dist../.env HTTP/2.0" 403 369 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 14:02:22
UTC ·
(3 days ago)
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /ngsw.json HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /h8gizfmqjggrv194nm36 HTTP/2.0" 404 12808
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /z9x8c7v6b5-debug-trigge ...
show more
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /ngsw.json HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /h8gizfmqjggrv194nm36 HTTP/2.0" 404 12808
34.21.255.10 - - [06/Nov/2026:15:02:16 +0100] "GET /z9x8c7v6b5-debug-trigger-valeurdelor.com HTTP/2.0" 404 12808
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-content/themes/uncode/library/js/ai-uncode.js.map HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js.map HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-includes/js/mediaelement/wp-mediaelement.min.js.map HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-content/themes/uncode/library/js/init.js.map HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js.map HTTP/2.0" 404 12805
34.21.255.10 - - [06/Nov/2026:15:02:17 +0100] "GET /wp-includ
...
show less
Web Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 13:29:15
UTC ·
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.21.255.10 (10.255.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:29:08.775596 2026] [security2:error] [pid 9922:tid 992 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.21.255.10 (10.255.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:29:08.775596 2026] [security2:error] [pid 9922:tid 9922] [client 34.21.255.10:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.upskirtcrazy.com|F|2"] [data ".upskirtcrazy.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.upskirtcrazy.com"] [uri "/z9x8c7v6b5-debug-trigger-www.upskirtcrazy.com"] [unique_id "au3WJEGMhfe3J6B0kGZDIgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 13:27:00
UTC ·
(3 days ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 11:49:37
UTC ·
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-11-06 11:48:00
UTC ·
(3 days ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
vanderhost
2026-11-06 11:43:25
UTC ·
(3 days ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /.env%3F.css via rule: regex:/^\/\.env/i
Web App Attack
Bad Web Bot
Anonymous
2026-11-06 10:26:10
UTC ·
(3 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
Anonymous
2026-11-06 10:10:43
UTC ·
(3 days ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking