๐ซ๐ท
COMAITE
2026-10-19 17:35:23
(9 hours ago)
Common web attack from 34.47.16.55.
Web App Attack
๐ท๐ด
clauss
2026-10-19 17:27:46
(9 hours ago)
34.47.16.55 - - [19/Oct/2026:20:27:45 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 Ap ...
show more
34.47.16.55 - - [19/Oct/2026:20:27:45 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.47.16.55 - - [19/Oct/2026:20:27:45 +0300] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 16:36:30
(10 hours ago)
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.47.16.55 - - [19/Oct/2026:18:35:34 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 63467 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.47.16.55 - - [19/Oct/2026:18:35:34 +0200] "GET /xgdemn58y293vjnybqjn HTTP/2.0" 404 63404 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.47.16.55 - - [19/Oct/2026:18:35:34 +0200] "GET /dist/manifest.json HTTP/2.0" 404 63402 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.47.16.55 - - [19/Oct/2026:18:35:34 +0200] "GET /z9x8c7v6b5-debug-trigger-lef010.nl HTTP/2.0"
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
tomkolp
2026-10-19 16:23:31
(10 hours ago)
CrowdSec - Scenario: crowdsecurity/http-probing. Duration: 4h.
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 15:05:30
(12 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.47.16.55 (55.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.47.16.55 (55.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 11:05:27.234652 2026] [security2:error] [pid 29864:tid 29864] [client 34.47.16.55:60244] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.lavahotspringsrealestate.com|F|2"] [data ".lavahotspringsrealestate.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.lavahotspringsrealestate.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.lavahotspringsrealestate.com"] [unique_id "atYxt_CAzagP9TmaWdvaPwAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
brechtr
2026-10-19 15:01:54
(12 hours ago)
[Press84-BanHammer] 404 flood โ 30 hits in 60s โ Sourced from: www.langsvlaamsewegen.be โ Request: G ...
show more
[Press84-BanHammer] 404 flood โ 30 hits in 60s โ Sourced from: www.langsvlaamsewegen.be โ Request: GET /reset-password
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
maxpower
2026-10-19 14:53:46
(12 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.47.16.55 (CA/Canada/55.16.47.34.bc.go ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.47.16.55 (CA/Canada/55.16.47.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.47.16.55 - - [19/Oct/2026:16:53:42 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 403 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" "34.47.16.55" host=lasfiziosapizzeria.it
show less
Port Scan
๐ฉ๐ช
tafeu.de
2026-10-19 14:51:00
(12 hours ago)
Brute-Force
Web App Attack
๐ฉ๐ฐ
HostingGroup
2026-10-19 14:31:54
(12 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 4. First blocked: 2026-10-19.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
snappic
2026-10-19 13:41:24
(13 hours ago)
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (c ...
show more
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)]
show less
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-19 13:15:02
(14 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-10-19 13:13:20
(14 hours ago)
Vulnerability scanning | host: mail.le-localhost.org | method: GET, POST | path: /4aroplhk6zmtkyr98j ...
show more
Vulnerability scanning | host: mail.le-localhost.org | method: GET, POST | path: /4aroplhk6zmtkyr98ju8, /r2pltdk0ft1im1253gim, /z9x8c7v6b5-debug-trigger-mail.le-localhost.org (+16 more) | ua: Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36, Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/), Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler) (+8 more) | src_port: 34568
show less
Port Scan
Web App Attack
๐ง๐ท
Halux
2026-10-19 12:38:14
(14 hours ago)
34.47.16.55 Probing protected path or service
Web App Attack
Anonymous
2026-10-19 12:26:30
(14 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-19 12:08:16
(15 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking