|
🇩🇪
LRob
|
|
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) (+7 more) | p ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler), Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/) (+7 more) | path: /@fs/.env, /wp-admin/.env, /@fs/../.env (+7 more)
show less
|
Bad Web Bot
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇫🇷
Rom74
|
|
[27/Oct/2026:23:54:40 +0000] - - 444 - GET https nextcloud.ton-espace.com "/.env.old" [Client 34.47.24.122] [Length 0] [Gzip -] [Sent-to 192.168.1.16] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gp ...
show more
[27/Oct/2026:23:54:40 +0000] - - 444 - GET https nextcloud.ton-espace.com "/.env.old" [Client 34.47.24.122] [Length 0] [Gzip -] [Sent-to 192.168.1.16] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-"
[27/Oct/2026:23:54:40 +0000] - - 444 - GET https nextcloud.ton-espace.com "/.env.backup" [Client 34.47.24.122] [Length 0] [Gzip -] [Sent-to 192.168.1.16] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" "-"
[27/Oct/2026:23:54:40 +0000] - - 444 - GET https nextcloud.ton-espace.com "/app/.env" [Client 34.47.24.122] [Length 0] [Gzip -] [Sent-to 192.168.1.16] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])" "-"
...
show less
|
Web App Attack
|
|
🇧🇪
cmbplf
|
|
119 requests with url.path */@fs/*
|
Brute-Force
Bad Web Bot
|
|
🇫🇷
dynamix
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇩🇪
rh24
|
|
(badbots) Bad bot user-agent [redacted] from 34.47.24.122 (CA/Canada/122.24.47.34.bc.googleusercontent.com)
|
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:31:10.730701 2026] [security2:error] [pid 11310:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:31:10.730701 2026] [security2:error] [pid 11310:tid 11310] [client 34.47.24.122:53182] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.tonyvillanueva.com"] [uri "/.env.local"] [unique_id "auCnnqulsYYsJvsrEdGdgwAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇪🇸
masterguru
|
|
(cpanel) Failed cPanel login from 34.47.24.122 (CA/Canada/122.24.47.34.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
|
Hacking
|
|
Anonymous
|
|
Detected by CrowdSec: crowdsecurity/http-sensitive-files
|
Web App Attack
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:03:58.670006 2026] [security2:error] [pid 28985:tid 28 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 05:03:58.670006 2026] [security2:error] [pid 28985:tid 28985] [client 34.47.24.122:56054] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.toody.com"] [uri "/.env.supabase"] [unique_id "auBo_qM1istL4_iGvi_c-QAAAAw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 03:29:00.402691 2026] [security2:error] [pid 22383:tid 22 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.24.122 (122.24.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 03:29:00.402691 2026] [security2:error] [pid 22383:tid 22383] [client 34.47.24.122:60194] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.tonylai.com"] [uri "/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env"] [unique_id "auBSvNx5V-90AAo-28jzigAAABQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
[ns1.skdns.gr] httpd-suspicious-path: iis-w3c
|
Hacking
Web App Attack
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇩🇪
updown.io
|
|
{"level":"info","ts":1793061724.3136916,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.47.24.122","remote_port":"57646","client_ip":"34.47.24.122","proto":"HTTP/2.0","method":"POST","host":"status.tootlehall.com"," ...
show more
{"level":"info","ts":1793061724.3136916,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.47.24.122","remote_port":"57646","client_ip":"34.47.24.122","proto":"HTTP/2.0","method":"POST","host":"status.tootlehall.com","uri":"/api/graphql","headers":{"Sec-Fetch-Dest":["empty"],"Sec-Ch-Ua-Mobile":["?1"],"Origin":["https://status.tootlehall.com"],"Sec-Ch-Ua-Platform":["\"Android\""],"Sec-Fetch-Mode":["cors"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Accept-Language":["en-US,en;q=0.9"],"Content-Type":["application/json"],"Accept":["*/*"],"Cookie":["REDACTED"],"Referer":["https://status.tootlehall.com"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Priority":["u=1, i"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"Sec-Fetch-Site":["same-origin"],"Content-Length":["86"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865
...
show less
|
DDoS Attack
Web App Attack
|
