|
🇩🇪
klaus_ph
|
|
2026-09-22 06:25:54,265 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 34.21.171.167
...
|
Bad Web Bot
|
|
🇩🇪
klaus_ph
|
|
2026-09-21 23:28:16,072 fail2ban.actions [1549]: NOTICE [ipblocklist] Ban 34.21.171.167
...
|
Bad Web Bot
|
|
🇺🇸
infra-monitor
|
|
Automated ban via infra-monitor: crowdsecurity/http-path-traversal-probing, crowdsecurity/http-probing, mgmt-path-probe
|
Port Scan
Web App Attack
|
|
🇩🇪
BlueWire Hosting
|
|
High-confidence malicious configuration/VCS probe
|
Web App Attack
|
|
🇹🇭
thaizone.com
|
|
Hacking attempts against websites (D1) #1
|
Web App Attack
Hacking
|
|
🇮🇹
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-09-19 06:19:25,188 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Unban 73.176.160.52cloudlinux2 fail2ban: 2026-09-19 06:19:44,827 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.21.171.167 ...
show more
cloudlinux2 fail2ban: 2026-09-19 06:19:25,188 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Unban 73.176.160.52cloudlinux2 fail2ban: 2026-09-19 06:19:44,827 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.21.171.167 - 2026-09-19 06:19:44cloudlinux2 fail2ban: 2026-09-19 06:19:44,817 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.21.171.167 - 2026-09-19 06:19:44cloudlinux2 fail2ban: 2026-09-19 06:19:45,232 fail2ban.filter [1813]: INFO [recidive] Found 34.21.171.167 - 2026-09-19 06:19:45cloudlinux2 fail2ban: 2026-09-19 06:19:45,226 fail2ban.actions [1813]: NOTICE [plesk-modsecurity] Ban 34.21.171.167cloudlinux2 fail2ban: 2026-09-19 06:19:45,072 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.21.171.167 - 2026-09-19 06:19:45cloudlinux2 fail2ban: 2026-09-19 06:19:42,102 fail2ban.filter [1813]: INFO [plesk-modsecurity] Found 34.21.171.167 - 2026-09-19 06:19:41cloudlinux2 fail2ban: 2026-09-19 06:20:09,031 fail
show less
|
Web App Attack
|
|
🇵🇱
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET) | Endpoint: /icecoder/lib/terminal-xhr.php | UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/) • Generated by: github.com/sefinek/Cloudfl ...
show more
Triggered Cloudflare WAF (firewallCustom) from SG.
Action: MANAGED_CHALLENGE | Protocol: HTTP/2 (GET) | Endpoint: /icecoder/lib/terminal-xhr.php | UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
🇨🇦
alexbfr
|
|
Fail2Ban report from nginx-bot-trap; automated HTTP honeypot detection.
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|
|
🇩🇪
AetherFox
|
|
AetherFox VoidGuard detected: [Sat Sep 19 03:59:15.314335 2026] [authz_core:error] [pid 3079385:tid 3079413] [client 34.21.171.167:45426] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sat Sep 19 03:59:16.326485 2026] [authz ...
show more
AetherFox VoidGuard detected: [Sat Sep 19 03:59:15.314335 2026] [authz_core:error] [pid 3079385:tid 3079413] [client 34.21.171.167:45426] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sat Sep 19 03:59:16.326485 2026] [authz_core:error] [pid 3079385:tid 3079415] [client 34.21.171.167:45426] AH01630: client denied by server configuration: proxy:https://[MASKED]/service_account.json
[Sat Sep 19 03:59:16.733571 2026] [authz_core:error] [pid 3079385:tid 3079419] [client 34.21.171.167:45426] AH01630: client denied by server configuration: proxy:https://[MASKED]/firebase-service-account.json
[Sat Sep 19 03:59:17.178841 2026] [authz_core:error] [pid 3079385:tid 3079420] [client 34.21.171.167:45430] AH01630: client denied by server configuration: proxy:https://[MASKED]/.github/.env
[Sat Sep 19 03:59:17.193351 2026] [authz_core:error] [pid 3079385:tid 3079417] [client 34.21.171.167:45442] AH01630: client denied by server configuration: p
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Savvii
|
|
20 attempts against mh-misbehave-ban on redirect
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
|
Web App Attack
|
|
🇩🇪
pscriptos
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
|
Web App Attack
Hacking
|
|
🇬🇧
Andrew
|
|
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /dashboard%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /admin%2F.env HTTP/1.1" 404 491 "-" "Moz ...
show more
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /dashboard%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /admin%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected]) AppleWebKit/537.36"
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /api%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.21.171.167 - - [19/Sep/2026:02:55:05 +0100] "GET /settings%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected])"
34.21.171.167 - - [19/Sep/2026:02:55:09 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.21.171.167 - - [19/Sep/2026:02:55:23 +0100] "POST /lib/terminal-xhr.php HTTP/1.1" 404 557 "-" "Mozilla/5.0 (compatible;
...
show less
|
Hacking
Web App Attack
|
|
🇯🇵
weils.net
|
|
2026-09-19 09:52:32(GMT+8) - /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared
|
Bad Web Bot
|
