π«π·
IRISIO
2026-10-27 09:10:47
(2 hours ago)
scans/SQL injection/spam posts : 196 queries
Web App Attack
SQL Injection
Anonymous
2026-10-27 03:05:42
(8 hours ago)
CrowdSec detected crowdsecurity/http-probing (11 events).
Web App Attack
π³π±
Alt255
2026-10-27 02:18:56
(9 hours ago)
[cb-03al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-03al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.87.92.202 - - [27/Oct/2026:03:18:50 +0100] "GET /_nuxt/../.env HTTP/2.0" 404 343 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
francelink.fr
2026-10-27 01:17:34
(10 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-27T00:52:20.000Z.
Web App Attack
π³π±
Savvii
2026-10-27 00:35:02
(10 hours ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
π³π±
BlueWire Hosting
2026-10-26 22:45:13
(12 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
π©πͺ
LRob
2026-10-26 18:17:23
(17 hours ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36, CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) (+12 more) | path: /manifest.json, /ap4jstmv335wavvqomi0, /dist/manifest.json (+17 more)
show less
Bad Web Bot
π³π±
Alt255
2026-10-26 15:08:04
(20 hours ago)
[cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apac ...
show more
[cb-01vi] Excessive 404 errors (web scanning): 50 suspicious requests detected by fail2ban jail apache-404. Example: 34.87.92.202 - - [26/Oct/2026:16:07:43 +0100] "GET /ngsw.json HTTP/2.0" 404 4622 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.87.92.202 - - [26/Oct/2026:16:07:43 +0100] "GET /s8xfmbdghfj7q9brhm7e HTTP/2.0" 404 4622 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.87.92.202 - - [26/Oct/2026:16:07:43 +0100] "GET /j2hpkamkrqb9x2nz90re HTTP/2.0" 404 4622 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.87.92.202 - - [26/Oct/2026:16:07:44 +0100] "GET /backoffice HTTP/2.0" 404 4645 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
mans.
...
show less
Bad Web Bot
Web App Attack
π©π°
Ha1fdan
2026-10-26 15:05:04
(20 hours ago)
Blocked by CrowdSec: crowdsecurity/http-bad-user-agent
Brute-Force
Exploited Host
π©πͺ
updown.io
2026-10-26 14:19:13
(21 hours ago)
{"level":"info","ts":1793024338.780773,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1793024338.780773,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.87.92.202","remote_port":"54568","client_ip":"34.87.92.202","proto":"HTTP/2.0","method":"GET","host":"status.rec.mro.name","uri":"/.next/.env","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.rec.mro.name","ech":false}},"bytes_read":0,"user_id":"","duration":0.00076532,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1793024338.7823267,"logger":"http.log.access.log1","msg":"handled request",
...
show less
DDoS Attack
Web App Attack
π³π±
Site.eu
2026-10-26 10:36:42
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
π―π΅
amyriad
2026-10-26 09:29:43
(1 day ago)
34.87.92.202 - - [26/Oct/2026:18:29:43 +0900] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount ...
show more
34.87.92.202 - - [26/Oct/2026:18:29:43 +0900] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/ca.crt?raw?? HTTP/1.1" 307 345 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
DDoS Attack
Hacking
Brute-Force
π©π°
floyd_dk
2026-10-26 08:59:20
(1 day ago)
34.87.92.202 - - [26/Oct/2026:08:59:18 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 ( ...
show more
34.87.92.202 - - [26/Oct/2026:08:59:18 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.87.92.202 - - [26/Oct/2026:08:59:19 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.87.92.202 - - [26/Oct/2026:08:59:20 +0000] "GET /z9x8c7v6b5-debug-trigger-verdaccio.hobbes.dk HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.87.92.202 - - [26/Oct/2026:08:59:20 +0000] "GET /assets/manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.87.92.202 - - [26/Oct/2026:08:59:20 +0000] "GET /uhyr14w8q67nxanyj55a HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://o
...
show less
Web App Attack
π«π·
β¨
2026-10-26 01:06:17
(1 day ago)
Domain : brightekeurope.com
Rule : WEB
IP in black list
Port Scan
π¬π§
consul.to
2026-10-25 23:04:02
(1 day ago)
Web attack/malicious scanning detected
Web App Attack