π³π±
Site.eu
2026-10-12 13:45:31
(3 days ago)
Excessive multi-domain requests
Brute-Force
π«π·
GEDAL
2026-10-09 04:01:24
(6 days ago)
Fail2ban webexploits @ <hostname> : 34.87.51.57 - - [09/Oct/2026:06:01:23 +0200] "GET /.git/config H ...
show more
Fail2ban webexploits @ <hostname> : 34.87.51.57 - - [09/Oct/2026:06:01:23 +0200] "GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
show less
Brute-Force
SSH
π³π±
Alt255
2026-10-09 02:49:38
(6 days ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.87.51.57 - - [09/Oct/2026:04:49:17 +0200] "GET /.env.js HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
show less
Bad Web Bot
Web App Attack
πͺπΈ
masterguru
2026-10-09 02:47:07
(6 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "applebot" at REQUEST_HEADERS:User-Agent. (1100000-1 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "applebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
πͺπΈ
robotstxt
2026-10-09 02:40:16
(6 days ago)
34.87.51.57 - - [09/Oct/2026:02:39:53 +0000] "GET /wp-includes/js/dist/script-modules/block-library/ ...
show more
34.87.51.57 - - [09/Oct/2026:02:39:53 +0000] "GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/2.0" 403 14674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.87.51.57"
34.87.51.57 - - [09/Oct/2026:02:39:53 +0000] "GET /wp-content/plugins/podlove-web-player/web-player/embed.js?ver=5.10.0 HTTP/2.0" 403 14674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.87.51.57"
34.87.51.57 - - [09/Oct/2026:02:39:53 +0000] "GET /wp-content/plugins/stop-user-enumeration/frontend/js/frontend.js?ver=1.7.9 HTTP/2.0" 403 14674 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.87.51.57"
34.87.51.57 - - [09/Oct/2026:02:39:53 +0000] "GET /wp-content/plugins/podlove-web-player/js/cache.js?ver=
...
show less
Web App Attack
π¬π§
gws-hostmaster
2026-10-09 01:48:09
(6 days ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Path Traversal Attack (/../) or (/.../);Remote Command Execution: Unix Shell Code Found;Restricted File Access Attempt;
show less
Web App Attack
Anonymous
2026-10-09 01:22:13
(6 days ago)
34.87.51.57 - - [09/Oct/2026:03:22:09 +0200] "GET /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%A ...
show more
34.87.51.57 - - [09/Oct/2026:03:22:09 +0200] "GET /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 14199 "https://stats-degroupage.fr/cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.87.51.57 - - [09/Oct/2026:03:22:10 +0200] "GET /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 200 14199 "https://stats-degroupage.fr/cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.87.51.57 - - [09/Oct/2026:03:22:12 +0200] "GET /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1" 200 14199 "https://stats-degroupage.fr/cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
show less
Web App Attack
π«π·
polarolouis
2026-10-08 22:36:04
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
π§π·
radardatelecom
2026-10-08 22:27:09
(1 week ago)
Blocked by Radar da Telecom firewall β abuseipdb
Bad Web Bot
Web App Attack
π©πͺ
Phenix Info
2026-10-08 22:18:16
(1 week ago)
SmallGuard.fr/Prestashop HoneyPot
Web App Attack
Anonymous
2026-10-08 22:04:02
(1 week ago)
Bot / scanning and/or hacking attempts: POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prep ...
show more
Bot / scanning and/or hacking attempts: POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend, GET /static/../../../a/../../../../proc/self/environ HTTP/2.0, GET /debug/pprof HTTP/2.0, GET /media../.env HTTP/2.0, POST /cgi-bin/php?-d+allow_url_include%3don+-d+auto_prepend_fil, GET /gcp-credentials.json HTTP/2.0, GET /document.php?modulepart=systemtools&file=../conf/conf.php&
show less
Hacking
Web App Attack
Anonymous
2026-10-08 21:57:14
(1 week ago)
34.87.51.57 - - [08/Oct/2026:21:57:13 +0000] "GET /@fs/app/.env?raw?? HTTP/2.0" 404 49167 "-" "Mozil ...
show more
34.87.51.57 - - [08/Oct/2026:21:57:13 +0000] "GET /@fs/app/.env?raw?? HTTP/2.0" 404 49167 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
π«π·
security.rdmc.fr
2026-10-08 21:31:25
(1 week ago)
Sensitive File Scan
Web App Attack
π³π±
MyGlobalFlowers
2026-10-08 21:11:32
(1 week ago)
Multiple WAF Violations
Web App Attack
π¨π
YF
2026-10-08 21:00:29
(1 week ago)
Distributed subnet attack β coordinated scanning from multiple IPs in the same /24
DDoS Attack
Web App Attack