🇺🇸
Secure Gateway®️
2026-10-16 22:00:25
(56 minutes ago)
Report By Secure Gateway Security Team: Suspicious File Upload Attempt
Hacking
🇺🇸
ALSCO®️
2026-10-16 22:00:25
(56 minutes ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
Web App Attack
2026-10-16 17:34:53
(5 hours ago)
Web Probe / Attack
Web App Attack
🇩🇪
DyhnenTv
2026-10-16 16:35:23
(6 hours ago)
CrowdSec webserver: crowdsecurity/http-probing
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-16 16:14:15
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.84.125.196 (196.125.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.125.196 (196.125.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:14:08.317328 2026] [security2:error] [pid 4975:tid 4975] [client 34.84.125.196:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.distro.media"] [uri "/.htpasswd"] [unique_id "atJNUL6GHGWrN-XMFoCefQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-10-16 16:10:13
(6 hours ago)
34.84.125.196 - - [16/Oct/2026:18:10:13 +0200] "GET /.git/config HTTP/1.1" 200 264 "-" "Mozilla/5.0 ...
show more
34.84.125.196 - - [16/Oct/2026:18:10:13 +0200] "GET /.git/config HTTP/1.1" 200 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "136.243.2.38"
...
show less
Brute-Force
Web App Attack
🇩🇪
Blexyel
2026-10-16 15:53:14
(7 hours ago)
34.84.125.196 - - [16/Oct/2026:17:53:13 +0200] "GET /.git/config HTTP/1.1" 200 264 "-" "Mozilla/5.0 ...
show more
34.84.125.196 - - [16/Oct/2026:17:53:13 +0200] "GET /.git/config HTTP/1.1" 200 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-10-16 15:19:22
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.84.125.196 (JP/Japan/196.125.84.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.84.125.196 (JP/Japan/196.125.84.34.bc.googleusercontent.com)
show less
SQL Injection
🇫🇮
KTSTechnology
2026-10-16 15:16:53
(7 hours ago)
Web vulnerability scanning detected by our ISP firewall
Web App Attack
🇳🇱
Alt255
2026-10-16 14:41:20
(8 hours ago)
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.84.125.196 - - [16/Oct/2026:16:41:10 +0200] "GET /duwz20wo62w0wzx03631 HTTP/2.0" 404 1878 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.84.125.196 - - [16/Oct/2026:16:41:10 +0200] "GET /settings HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.84.125.196 - - [16/Oct/2026:16:41:10 +0200] "GET /dashboard HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.84.125.196 - - [16/Oct/2026:16:41:10 +0200] "GET /account/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 1
...
show less
Bad Web Bot
Web App Attack
🇨🇭
jebla.ch
2026-10-16 11:53:10
(11 hours ago)
Busted by the WatchPost edge sentinel: this host was hammering login endpoints with failed credentia ...
show more
Busted by the WatchPost edge sentinel: this host was hammering login endpoints with failed credentials (brute force). Blocked at the edge, logged, and shared with the community. Last seen 2026-10-15 19:16 UTC.
show less
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-10-16 10:03:02
(12 hours ago)
{"level":"info","ts":1792144980.1577237,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792144980.1577237,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.84.125.196","remote_port":"44580","client_ip":"34.84.125.196","proto":"HTTP/2.0","method":"GET","host":"status.shoutouts.lol","uri":"/manifest.json","headers":{"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"],"Sec-Fetch-User":["?1"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Microsoft Edge\";v=\"152\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["document"],"Priority":["u=0, i"],"X-Nextjs-Data":["1"],"Sec-Fetch-Site":["none"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Ch-Ua-Platform":["\"Windows\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:midd
...
show less
DDoS Attack
Web App Attack
🇫🇷
Murazaki
2026-10-16 08:30:19
(14 hours ago)
portainer.mehdibenadel.com 34.84.125.196 - - [16/Oct/2026:10:30:18 +0200] "-" 500 170 "-" "-" "-"
.. ...
show more
portainer.mehdibenadel.com 34.84.125.196 - - [16/Oct/2026:10:30:18 +0200] "-" 500 170 "-" "-" "-"
...
show less
Hacking
🇬🇧
consul.to
2026-10-16 08:05:01
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
jormaster3k
2026-10-16 07:24:25
(15 hours ago)
Attack against Apache (too many 404s)
Web App Attack