๐ซ๐ฎ
oh.mg
2026-10-14 19:29:55
(1 week ago)
[Wed Oct 14 21:29:53.468815 2026] [security2:error] [pid 57342:tid 57364] [client 34.81.42.101:0] [c ...
show more
[Wed Oct 14 21:29:53.468815 2026] [security2:error] [pid 57342:tid 57364] [client 34.81.42.101:0] [client 34.81.42.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "hk.mmn.ca"] [uri "/login"] [unique_id "as_YMeiGuOc8GKrfPTJdjAAAApQ"]
[Wed Oct 14 21:29:55.072370 2026] [security2:error] [pid 57310:tid 57313] [client 34.81.42.101:0] [client 34.81.42.101] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [
...
show less
Web App Attack
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-14 18:49:25
(1 week ago)
34.81.42.101 - - [14/Oct/2026:18:48:25 +0000] "GET /robots.txt HTTP/2.0" 403 134 "https://starship.x ...
show more
34.81.42.101 - - [14/Oct/2026:18:48:25 +0000] "GET /robots.txt HTTP/2.0" 403 134 "https://starship.xyz/robots.txt" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-" edge="34.81.42.101"
34.81.42.101 - - [14/Oct/2026:18:48:26 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 2 "https://starship.xyz/.vite/manifest.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.81.42.101"
34.81.42.101 - - [14/Oct/2026:18:48:26 +0000] "GET /z9x8c7v6b5-debug-trigger-starship.xyz HTTP/2.0" 403 20 "https://starship.xyz/z9x8c7v6b5-debug-trigger-starship.xyz" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-" edge="34.81.42.101"
34.81.42.101 - - [14/Oct/2026:18:48:26 +0000] "GET /build/manifest.json HTTP/2.0" 403 2 "https://starship.xyz/build/manifest.json" "Mozilla/5.0 (Macintosh
...
show less
Web App Attack
๐บ๐ธ
kbeezie
2026-10-14 18:28:52
(1 week ago)
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /%2Fsettings HTTP/1.1" 429 162 "-" "Mozilla/5.0 A ...
show more
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /%2Fsettings HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/1.1" 429 162 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /rclone.conf HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /%2Fapi/config HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.81.42.101 - - [14/Oct/2026:14:28:51 -0400] "GET /pages/index.astro.mjs.map HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-14 15:33:43
(1 week ago)
(PERMBLOCK) 34.81.42.101 (TW/Taiwan/Taipei City/Taipei/101.42.81.34.bc.googleusercontent.com/[redact ...
show more
(PERMBLOCK) 34.81.42.101 (TW/Taiwan/Taipei City/Taipei/101.42.81.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐ธ๐ช
vaia.cloud
2026-10-14 15:25:03
(1 week ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
๐จ๐ฆ
Anytech
2026-10-14 14:40:36
(1 week ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
๐ง๐ท
radardatelecom
2026-10-14 14:16:04
(1 week ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
TAY
2026-10-14 12:36:50
(1 week ago)
34.81.42.101 - - [14/Oct/2026:20:36:48 +0800] "GET /static../.env HTTP/1.1" 404 38122 "-" "Mozilla/5 ...
show more
34.81.42.101 - - [14/Oct/2026:20:36:48 +0800] "GET /static../.env HTTP/1.1" 404 38122 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.81.42.101 - - [14/Oct/2026:20:36:48 +0800] "GET /images../.env HTTP/1.1" 404 43899 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.81.42.101 - - [14/Oct/2026:20:36:48 +0800] "GET /media../.env HTTP/1.1" 404 43899 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.81.42.101 - - [14/Oct/2026:20:36:48 +0800] "GET /dist../.env HTTP/1.1" 404 43903 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.81.42.101 - - [14/Oct/2026:20:36:49 +0800] "GET /js../.env HTTP/1.1" 404 43921 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
3
...
show less
Brute-Force
Anonymous
2026-10-14 11:07:02
(1 week ago)
Bot / scanning and/or hacking attempts: POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_ ...
show more
Bot / scanning and/or hacking attempts: POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e, POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_, POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%
show less
Hacking
Web App Attack
๐ฉ๐ช
raph
2026-10-14 10:50:12
(1 week ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-10-14 10:25:40
(1 week ago)
XSS Attempt
Hacking
๐ณ๐ฑ
Alt255
2026-10-14 10:23:33
(1 week ago)
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.81.42.101 - - [14/Oct/2026:12:23:20 +0200] "GET /media../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.81.42.101 - - [14/Oct/2026:12:23:20 +0200] "GET /build../.env HTTP/2.0" 403 557 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-14 10:05:59
(1 week ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, path_traversal, credential_file, source_backup, git_exposure, aws_creds, dotfile_probe, ssh_keys. Observed by 1 sensor(s); 397 hits.
show less
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-14 09:41:28
(1 week ago)
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-22al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.81.42.101 - - [14/Oct/2026:11:41:05 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 44768 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.81.42.101 - - [14/Oct/2026:11:41:05 +0200] "GET /build/manifest.json HTTP/2.0" 404 44662 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.81.42.101 - - [14/Oct/2026:11:41:05 +0200] "GET /dist/manifest.json HTTP/2.0" 404 44662 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.81.42.101 - - [14/Oct/2026:11:41:05 +0200] "GET /z9x8c7v6b5-deb
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
NewGastroline
2026-10-14 09:29:42
(1 week ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack