🇩🇪
Nightreaver
2026-09-01 02:13:44
(15 minutes ago)
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /@fs/proc/self/environ HTTP/1.1" 404 514 "-" "Mo ...
show more
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /@fs/proc/self/environ HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 15_0) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.6 Safari/605.1.15; compatible; ClaudeBot/1.0; [email protected] "
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /@vite/env HTTP/1.1" 404 1026 "-" "Mozilla/5.0 (compatible; Perplexity-User/1.0; https://perplexity.ai/perplexity-user)"
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /files../etc/passwd HTTP/1.1" 404 1026 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; https://developer.amazon.com/support/amazonbot)"
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /api/config HTTP/1.1" 404 1026 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Claude-User/1.0; https://www.anthropic.com/claude-user) Version/18.4 Safari/605.1.15"
34.26.243.115 - - [01/Sep/2026:04:13:44 0200] "GET /actuator/env HTTP/1.1" 4[...]
show less
Bad Web Bot
Web App Attack
2026-09-01 01:08:40
(1 hour ago)
2026/09/01 01:08:23 [error] 541#541: *26233 [client 34.26.243.115] ModSecurity: Access denied with c ...
show more
2026/09/01 01:08:23 [error] 541#541: *26233 [client 34.26.243.115] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `16' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `33' ) [file "/etc/modsecurity.d/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 33)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.16.0"] [maturity "0"] [accuracy "0"] [tag "modsecurity"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "82.84.91.211"] [uri "/download"] [unique_id "178822490394.500384"] [ref ""], client: 34.26.243.115, server: homesex.casa, request: "GET /download?file=../../../../etc/passwd HTTP/1.1", host: "82.84.91.211:443"
2026/09/01 01:08:23 [error] 541#541: *26235 [client 34.26.243.115] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `16' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `33' )
...
show less
Hacking
Web App Attack
2026-08-31 14:17:03
(12 hours ago)
[Mon Aug 31 16:17:00.797564 2026] [proxy_fcgi:error] [pid 93370:tid 93417] [client 34.26.243.115:195 ...
show more
[Mon Aug 31 16:17:00.797564 2026] [proxy_fcgi:error] [pid 93370:tid 93417] [client 34.26.243.115:19590] AH01071: Got error 'Primary script unknown'
[Mon Aug 31 16:17:01.490719 2026] [proxy_fcgi:error] [pid 93370:tid 93407] [client 34.26.243.115:5132] AH01071: Got error 'Primary script unknown'
[Mon Aug 31 16:17:01.523759 2026] [proxy_fcgi:error] [pid 94700:tid 94741] [client 34.26.243.115:19640] AH01071: Got error 'Primary script unknown'
[Mon Aug 31 16:17:01.547356 2026] [proxy_fcgi:error] [pid 93370:tid 93410] [client 34.26.243.115:5106] AH01071: Got error 'Primary script unknown'
[Mon Aug 31 16:17:02.346889 2026] [proxy_fcgi:error] [pid 93182:tid 93328] [client 34.26.243.115:4936] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇩🇪
YF
2026-08-31 12:00:16
(14 hours ago)
Distributed subnet attack — coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack
2026-08-31 11:37:44
(14 hours ago)
Aggressive Robot or Attack DDOS
DDoS Attack
🇳🇱
Savvii
2026-08-31 10:14:18
(16 hours ago)
20 attempts against mh-misbehave-ban on argon
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
tinect
2026-08-31 07:39:13
(18 hours ago)
This IP was detected by CrowdSec triggering tinect/http-sensitive-file-probe
Web App Attack
🇫🇷
service Informatique
2026-08-31 04:00:37
(22 hours ago)
GET /wp-json
Web App Attack
🇧🇾
lns.bz
2026-08-31 02:38:38
(23 hours ago)
.env scanning [BY]
Web App Attack
🇨🇦
Mediashaker
2026-08-31 00:41:13
(1 day ago)
(CT) IP 34.26.243.115 (US/United States/115.243.26.34.bc.googleusercontent.com) found to have 596 co ...
show more
(CT) IP 34.26.243.115 (US/United States/115.243.26.34.bc.googleusercontent.com) found to have 596 connections
show less
DDoS Attack
🇩🇪
Admins@FBN
2026-08-31 00:34:39
(1 day ago)
FW-PortScan: Traffic Blocked srcport=52286 dstport=443
Port Scan
🇮🇹
doit-systems
2026-08-30 10:57:45
(1 day ago)
Fail2ban: 5 bad attempts in 10m on tcp port 80,443
Web App Attack
🇳🇱
Savvii
2026-08-30 09:25:37
(1 day ago)
15 attempts against mh-modsecurity-ban on hostbillst
Brute-Force
Web App Attack
🇩🇪
AetherFox
2026-08-30 08:48:03
(1 day ago)
AetherFox VoidGuard detected: [Sun Aug 30 08:48:02.301479 2026] [authz_core:error] [pid 371314:tid 3 ...
show more
AetherFox VoidGuard detected: [Sun Aug 30 08:48:02.301479 2026] [authz_core:error] [pid 371314:tid 371352] [client 34.26.243.115:2848] AH01630: client denied by server configuration: /var/www/html/
[Sun Aug 30 08:48:02.301634 2026] [authz_core:error] [pid 371314:tid 371352] [client 34.26.243.115:2848] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Sun Aug 30 08:48:02.895732 2026] [authz_core:error] [pid 371314:tid 371343] [client 34.26.243.115:2848] AH01630: client denied by server configuration: /var/www/html/__aws_leak_probe_940ffe19__
[Sun Aug 30 08:48:02.896329 2026] [authz_core:error] [pid 371314:tid 371343] [client 34.26.243.115:2848] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Sun Aug 30 08:48:03.259190 2026] [authz_core:error] [pid 371314:tid 371348] [client 34.26.243.115:2848] AH01630: client denied by server configuration: /var/www/html/static..
...
show less
Bad Web Bot
Web App Attack
2026-08-30 05:41:22
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force