🇫🇷
dynamix
2026-11-06 17:00:32
UTC ·
(34 minutes ago)
Multiple WAF Violations
Web App Attack
🇩🇪
updown.io
2026-11-06 16:54:25
UTC ·
(40 minutes ago)
{"level":"info","ts":1793984064.920776,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.81.206.48","remote_port":"60518","client_ip":"34.81.206.48","proto":"HTTP/2.0","method":"GET","host":"status.lnx.network","uri": ...
show more
{"level":"info","ts":1793984064.920776,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.81.206.48","remote_port":"60518","client_ip":"34.81.206.48","proto":"HTTP/2.0","method":"GET","host":"status.lnx.network","uri":"/.env.dev.local","headers":{"Accept-Encoding":["gzip"],"X-Remote-Ip":["100.113.0.244"],"Accept":["*/*"],"X-Real-Ip":["100.113.0.244"],"X-Client-Ip":["100.113.0.244"],"X-Proxyuser-Ip":["100.113.0.244"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"],"True-Client-Ip":["100.113.0.244"],"X-Forwarded-For":["100.113.0.244"],"X-Custom-Ip-Authorization":["100.113.0.244"],"X-Remote-Addr":["100.113.0.244"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Cluster-Client-Ip":["100.113.0.244"],"X-Nextjs-Data":["1"],"X-Ori
...
show less
DDoS Attack
Web App Attack
🇳🇱
melroy89
2026-11-06 16:53:09
UTC ·
(41 minutes ago)
34.81.206.48 - - [06/Nov/2026:17:52:54 +0100] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "dify.libreweb.org" 0.000
34.81.206.48 - - [06/Nov/2026:17:52: ...
show more
34.81.206.48 - - [06/Nov/2026:17:52:54 +0100] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "dify.libreweb.org" 0.000
34.81.206.48 - - [06/Nov/2026:17:52:55 +0100] "GET /sitemap.xml HTTP/1.1" 403 9 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "dify.libreweb.org" 0.000
34.81.206.48 - - [06/Nov/2026:17:52:55 +0100] "GET /sitemap_index.xml HTTP/1.1" 403 9 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "dify.libreweb.org" 0.000
34.81.206.48 - - [06/Nov/2026:17:52:55 +0100] "GET /281b15g0xcvut3qhslix HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "dify.libreweb.org" 0.000
34.81.206.48 - - [06/Nov/2026:17:52:56 +0100] "GET /ks7am3fr7iaarby3c86s HTTP/1.1" 403 9 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "dify.libreweb.org" 0.000
34.
...
show less
Web App Attack
🇮🇪
AutosOnShow
2026-11-06 16:32:05
UTC ·
(1 hour ago)
blocked for webapp attack | path requested: /.env.development.local | seen at 2026-11-06 16:31:06.956 |
Web App Attack
🇳🇱
Alt255
2026-11-06 15:35:35
UTC ·
(1 hour ago)
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.206.48 - - [06/Nov/2026:16:35:22 +0100] "GET /css../.env HTTP/2.0" 403 369 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/s ...
show more
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.206.48 - - [06/Nov/2026:16:35:22 +0100] "GET /css../.env HTTP/2.0" 403 369 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Mangelot Hosting
2026-11-06 15:27:22
UTC ·
(2 hours ago)
(web_lfi) srv103 Path traversal / file inclusion attempt 34.81.206.48 (TW/Taiwan/48.206.81.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
Web App Attack
🇳🇱
Site.eu
2026-11-06 14:56:44
UTC ·
(2 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 14:53:03
UTC ·
(2 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
Anonymous
2026-11-06 14:20:09
UTC ·
(3 hours ago)
| [Dangerous/Taiwan] Aggressive IP 34.81.206.48 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 14:16:41
UTC ·
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot
🇳🇱
e.fierstra
2026-11-06 14:14:12
UTC ·
(3 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-06 14:10:05
UTC ·
(3 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
Anonymous
2026-11-06 14:07:11
UTC ·
(3 hours ago)
34.81.206.48 - - [06/Nov/2026:23:07:10 +0900] "GET / HTTP/2.0" 403 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.81.206.48 - - [06/Nov/2026:23:07:10 +0900] " ...
show more
34.81.206.48 - - [06/Nov/2026:23:07:10 +0900] "GET / HTTP/2.0" 403 418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.81.206.48 - - [06/Nov/2026:23:07:10 +0900] "GET /robots.txt HTTP/2.0" 403 348 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.206.48 - - [06/Nov/2026:23:07:10 +0900] "GET /sitemap.xml HTTP/2.0" 403 348 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.81.206.48 - - [06/Nov/2026:23:07:11 +0900] "GET /sitemap_index.xml HTTP/2.0" 403 371 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.81.206.48 - - [06/Nov/2026:23:07:11 +0900] "GET /settings/team HTTP/2.0" 403 348 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
...
show less
Brute-Force
🇩🇪
FeG Deutschland
2026-11-06 14:01:13
UTC ·
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇩🇪
FD-IX
2026-11-06 13:36:50
UTC ·
(3 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack