🇩🇪
palzer.IT
2026-10-09 01:46:08
(2 minutes ago)
Fail2ban automatic report for plesk-apache-badbot: 34.24.88.211 - - [09/Oct/2026:03:45:36 +0200] GET ...
show more
Fail2ban automatic report for plesk-apache-badbot: 34.24.88.211 - - [09/Oct/2026:03:45:36 +0200] GET / [DOMAIN_REMOVED] 200 5611 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@[DOMAIN_REMOVED])
show less
Bad Web Bot
🇺🇸
jormaster3k
2026-10-09 01:43:41
(5 minutes ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-09 01:05:04
(43 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/grafana-cve-2021-43798
Web App Attack
Hacking
🇩🇪
on-com
2026-10-09 00:42:04
(1 hour ago)
URL scan
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-10-09 00:34:16
(1 hour ago)
34.24.88.211 - - [09/Oct/2026:00:33:56 +0000] "GET / HTTP/2.0" 403 189 "https://noudiari.es/" "CCBot ...
show more
34.24.88.211 - - [09/Oct/2026:00:33:56 +0000] "GET / HTTP/2.0" 403 189 "https://noudiari.es/" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.24.88.211"
34.24.88.211 - - [09/Oct/2026:00:33:56 +0000] "GET /z9x8c7v6b5-debug-trigger-noudiari.es HTTP/2.0" 403 189 "https://noudiari.es/z9x8c7v6b5-debug-trigger-noudiari.es" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" "-" edge="34.24.88.211"
34.24.88.211 - - [09/Oct/2026:00:33:56 +0000] "GET /admin/login/ HTTP/2.0" 403 165 "https://www.noudiari.es/admin/login" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "-" edge="34.24.88.211"
34.24.88.211 - - [09/Oct/2026:00:33:56 +0000] "GET /reset-password/ HTTP/2.0" 403 165 "https://www.noudiari.es/reset-password" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "-" edge="34.24.88.211"
34.24.88.211 - - [09
...
show less
Web App Attack
🇫🇷
✨
2026-10-09 00:25:14
(1 hour ago)
Domain : redirect.netenergy.uk
Rule : hack
2026-10-09 00:23:22 217.194.210.152 GET /.htpasswd - 443 ...
show more
Domain : redirect.netenergy.uk
Rule : hack
2026-10-09 00:23:22 217.194.210.152 GET /.htpasswd - 443 - 34.24.88.211 HTTP/2 Mozilla/5.0 (compatible; PanguBot/1.0; https://www.huaweicloud.com/) - netenergy.uk 404 0 2 1520 444 87 - -
show less
Hacking
SQL Injection
Brute-Force
🇳🇱
Alt255
2026-10-09 00:24:07
(1 hour ago)
[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.24.88.211 - - [09/Oct/2026:02:24:04 +0200] "GET /dist/manifest.json HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.24.88.211 - - [09/Oct/2026:02:24:04 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.24.88.211 - - [09/Oct/2026:02:24:04 +0200] "GET /1mj99va9uwmg278zwqr6 HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.24.88.211 - - [09/Oct/2026:02:24:04 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 548 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0
...
show less
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-10-09 00:09:44
(1 hour ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
2026-10-09 00:02:00
(1 hour ago)
34.24.88.211 - - [09/Oct/2026:08:01:57 +0800] "GET /@fs/../.env?raw?? HTTP/2.0" 403 162 "-" "Mozilla ...
show more
34.24.88.211 - - [09/Oct/2026:08:01:57 +0800] "GET /@fs/../.env?raw?? HTTP/2.0" 403 162 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Brute-Force
SSH
🇺🇸
Major Hostility
2026-10-08 23:54:06
(1 hour ago)
"GET /webpack-stats.json HTTP/1.1" 404
"GET /asset-manifest.json HTTP/1.1" 404
"GET /z9x8c7v6b5-debu ...
show more
"GET /webpack-stats.json HTTP/1.1" 404
"GET /asset-manifest.json HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-[DOMAIN].com HTTP/1.1" 404
"GET /525ggohjiccrztze7a21 HTTP/1.1" 404
"GET /dist/manifest.json HTTP/1.1" 404
"GET /py2yupp2wbpwueo9cmbt HTTP/1.1" 404
"GET /assets/manifest.json HTTP/1.1" 404
"GET /static/manifest.json HTTP/1.1" 404
"GET /manifest.json HTTP/1.1" 404
"GET /signin HTTP/1.1" 404
"GET /login HTTP/1.1" 404
"GET /sign-in HTTP/1.1" 404
"GET /auth HTTP/1.1" 404
"POST /graphql HTTP/1.1" 404
"GET /auth/login HTTP/1.1" 404
"GET /account/login HTTP/1.1" 404
"GET /users/login HTTP/1.1" 404
"GET /user/login HTTP/1.1" 404
"GET /signup HTTP/1.1" 404
"GET /re
show less
Web App Attack
2026-10-08 23:48:43
(2 hours ago)
T: f2b 404 5x
Web App Attack
🇳🇱
Hans Renses
2026-10-08 23:37:28
(2 hours ago)
Web app attack: 9 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) ...
show more
Web app attack: 9 requests for known vulnerable paths (.env, xmlrpc.php, web shells, config backups) within one hour. Reported automatically by BotZoom.
show less
Web App Attack
Hacking
2026-10-08 23:29:37
(2 hours ago)
2026/10/08 23:29:35 [error] 3693531#3693531: *152207 [client 34.24.88.211] ModSecurity: Access denie ...
show more
2026/10/08 23:29:35 [error] 3693531#3693531: *152207 [client 34.24.88.211] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `40' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "logiciensoft.com"] [uri "/"] [unique_id "179150217570.610759"] [ref ""], client: 34.24.88.211, server: logiciensoft.com, request: "POST / HTTP/2.0", host: "logiciensoft.com"
2026/10/08 23:29:35 [error] 3693531#3693531: *152207 [client 34.24.88.211] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `40' ) [file "/usr/local/owasp-modsecurity-c
...
show less
Brute-Force
🇨🇦
Mediashaker
2026-10-08 23:29:03
(2 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.24.88.211 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.24.88.211 (US/United States/211.88.24.34.bc.googleusercontent.com)
show less
Bad Web Bot
🇨🇦
Anytech
2026-10-08 23:10:17
(2 hours ago)
Blocked by ConnMonitor
Web App Attack
