🇦🇺
2000cn.com.au
2026-10-28 07:55:14
(13 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-28 06:12:30
(15 hours ago)
[ti-17al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.48.183.18 - - [28/Oct/2026:07:12:13 +0100] "GET /build/.env HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compat ...
show more
[ti-17al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.48.183.18 - - [28/Oct/2026:07:12:13 +0100] "GET /build/.env HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.48.183.18 - - [28/Oct/2026:07:12:13 +0100] "GET /core/.env HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.48.183.18 - - [28/Oct/2026:07:12:13 +0100] "GET /.aws/credentials HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
2026-10-28 05:55:09
(15 hours ago)
Web application attack: grafana cve 2021 43798; Web application attack: http sensitive files; Web application attack: http path traversal probing; Web application attack: http cve 2021 41773; Probing for exposed secret / credential files
Hacking
Web App Attack
🇧🇪
cmbplf
2026-10-27 12:43:03
(1 day ago)
191 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇪🇸
masterguru
2026-10-27 09:53:42
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "PerplexityBot" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇬🇧
consul.to
2026-10-27 08:06:14
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 02:45:21
(1 day ago)
(mod_security) mod_security (id:210580) triggered by 34.48.183.18 (18.183.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 22:45:17.533619 2026] [security2:error] [pid 12899:tid 12 ...
show more
(mod_security) mod_security (id:210580) triggered by 34.48.183.18 (18.183.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 26 22:45:17.533619 2026] [security2:error] [pid 12899:tid 12899] [client 34.48.183.18:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||tellusafe.com|F|2"] [data "Matched Data: proc/self/environ found within ARGS:filename: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "tellusafe.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "auAQPYYPAvE03RZMp4QyeAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-10-27 02:01:43
(1 day ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-10-27 01:13:32
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-27 00:49:39
(1 day ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇳🇱
Savvii
2026-10-26 23:28:51
(1 day ago)
20 attempts against mh-misbehave-ban on mensa
Brute-Force
Bad Web Bot
Web App Attack
2026-10-26 22:51:45
(1 day ago)
34.48.183.18 - - [26/Oct/2026:17:51:43 -0500] "POST /api/graphql HTTP/1.1" 404 1288 "https://app.terracosystems.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.48.183.18 - - [2 ...
show more
34.48.183.18 - - [26/Oct/2026:17:51:43 -0500] "POST /api/graphql HTTP/1.1" 404 1288 "https://app.terracosystems.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.48.183.18 - - [26/Oct/2026:17:51:43 -0500] "GET /.env.supabase HTTP/1.1" 404 1288 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.48.183.18 - - [26/Oct/2026:17:51:43 -0500] "GET /.git/HEAD HTTP/1.1" 404 1288 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
🇨🇦
john doe
2026-10-26 18:40:53
(2 days ago)
SentinelBot: Secret-path hunting (6 distinct paths): Env File Hunting (score: 63)
Bad Web Bot
🇺🇸
Starburst SysOp Team
2026-10-26 18:08:43
(2 days ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-mnz6-1)
show less
Bad Web Bot
🇬🇧
consul.to
2026-10-26 01:03:04
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
