🇳🇱
Alt255
2026-10-27 04:27:04
(4 days ago)
[ti-01ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.107.101.193 - - \[21/Oct/2026:18:07:48 +0200\] "GET /.env.production.local HTTP/1.1" 200 957 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; +https://cohe ...
show more
[ti-01ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.107.101.193 - - \[21/Oct/2026:18:07:48 +0200\] "GET /.env.production.local HTTP/1.1" 200 957 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; +https://cohere.com/crawler\)"
34.107.101.193 - - \[21/Oct/2026:18:07:48 +0200\] "GET /.ssh/id_rsa HTTP/1.1" 403 620 "-" "Mozilla/5.0 \(compatible\; Bravebot/1.0\; +https://brave.com/search/\)"
34.107.101.193 - - \[21/Oct/2026:18:07:48 +0200\] "GET /.env.supabase HTTP/1.1" 403 620 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; [email protected] \)"
34.107.101.193 - - \[21/Oct/2026:18:07:48 +0200\] "GET /.ssh/config HTTP/1.1" 403 620 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot"
h
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:47:39
(5 days ago)
[ti-01ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.107.101.193 - - [21/Oct/2026:18:07:48 +0200] "GET /.env.production.local HTTP/1.1" 200 957 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.co ...
show more
[ti-01ov] Web exploit scanning: 6 suspicious requests detected by fail2ban jail <name>. Example: 34.107.101.193 - - [21/Oct/2026:18:07:48 +0200] "GET /.env.production.local HTTP/1.1" 200 957 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.107.101.193 - - [21/Oct/2026:18:07:48 +0200] "GET /.ssh/id_rsa HTTP/1.1" 403 620 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.107.101.193 - - [21/Oct/2026:18:07:48 +0200] "GET /.env.supabase HTTP/1.1" 403 620 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.107.101.193 - - [21/Oct/2026:18:07:48 +0200] "GET /.ssh/config HTTP/1.1" 403 620 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
h
...
show less
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-10-22 00:47:44
(1 week ago)
Exploit attempts against a web server: 2 requests.
Hacking
Web App Attack
2026-10-21 21:50:12
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇪🇸
masterguru
2026-10-21 18:27:18
(1 week ago)
BAD BOT - Detected and Blocked.. Matched phrase "GPTBot" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇩🇪
konseptit
2026-10-21 17:45:06
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.107.101.193 (DE/Germany/193.101.107.34.bc.googleusercontent.com)
SQL Injection
🇧🇾
lns.bz
2026-10-21 17:41:48
(1 week ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 17:39:33
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.107.101.193 (193.101.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:39:29.506098 2026] [security2:error] [pid 27106:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.101.193 (193.101.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 13:39:29.506098 2026] [security2:error] [pid 27106:tid 27106] [client 34.107.101.193:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shubil.com"] [uri "/.htpasswd"] [unique_id "atj40blaHztyhWhzcwZK-gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-10-21 17:38:19
(1 week ago)
[WedOct2119:38:11.6920202026][security2:error][pid3365486:tid3365590][client34.107.101.193:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/. ...
show more
[WedOct2119:38:11.6920202026][security2:error][pid3365486:tid3365590][client34.107.101.193:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".key\"][severity\"ERROR\"][hostname\"shadowdrummer.ch\"][uri\"/server.key\"][unique_id\"atj4g44MTsUVhzfCJb-_hwAAAQk\"]
show less
Hacking
Web App Attack
2026-10-21 16:51:11
(1 week ago)
Banned by Fail2Ban on server
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-21 16:48:03
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 34.107.101.193 (DE/Germany/193.101.107.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇳🇱
Site.eu
2026-10-21 16:36:39
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
tentwentyfour
2026-10-21 16:33:33
(1 week ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-10-21 16:11:33
(1 week ago)
15 attempts against mh-modsecurity-ban on frost
Brute-Force
Web App Attack
🇳🇱
Alboweb B.V.
2026-10-21 16:11:03
(1 week ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
