|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
๐ง๐ช
cmbplf
|
|
154 requests with url.path */@fs/*
|
Brute-Force
Bad Web Bot
|
|
Anonymous
|
|
Aggressive web scan
|
Web App Attack
|
|
๐ซ๐ท
900cm
|
|
[Wed Oct 07 03:18:19.889694 2026] [access_compat:error] [pid 1561859:tid 1561859] [client 34.107.50.145:58642] AH01797: client denied by server configuration: /var/www/darkintruder/.env
[Wed Oct 07 03:18:20.095015 2026] [access_compat:error] [pid 156 ...
show more
[Wed Oct 07 03:18:19.889694 2026] [access_compat:error] [pid 1561859:tid 1561859] [client 34.107.50.145:58642] AH01797: client denied by server configuration: /var/www/darkintruder/.env
[Wed Oct 07 03:18:20.095015 2026] [access_compat:error] [pid 1561864:tid 1561864] [client 34.107.50.145:58698] AH01797: client denied by server configuration: /var/www/darkintruder/.env.local
[Wed Oct 07 03:18:20.188001 2026] [access_compat:error] [pid 1561859:tid 1561859] [client 34.107.50.145:58642] AH01797: client denied by server configuration: /var/www/darkintruder/.env.production
...
show less
|
Port Scan
Brute-Force
SSH
|
|
๐ณ๐ฑ
Alt255
|
|
[backup01al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.107.50.145 - - [07/Oct/2026:02:57:31 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 ...
show more
[backup01al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.107.50.145 - - [07/Oct/2026:02:57:31 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐ช๐ธ
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.107.50.145 (145.50.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:19:21.386020 2026] [security2:error] [pid 2195:tid 2 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.50.145 (145.50.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 18:19:21.386020 2026] [security2:error] [pid 2195:tid 2195] [client 34.107.50.145:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.easy-byte.net"] [uri "/api/console/api_server"] [unique_id "asVz6cL-6BvbXqu1USggoQAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฎ๐น
mgarofano80
|
|
|
Brute-Force
Web App Attack
|
|
๐ฉ๐ช
BlueWire Hosting
|
|
Aggressive scanning resulting into 404
|
Bad Web Bot
|
|
๐บ๐ธ
NRVDigital
|
|
wordpress attacker
|
Web App Attack
|
|
Anonymous
|
|
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "CCBot ...
show more
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.107.50.145
34.107.50.145 - - [06/Oct/2026:08:22:04 -0500] "GET /.env.production?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compati
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
itsolon
|
|
[06/Oct/2026:15:10:47 +0200] 179129224741.765845 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:47 +0200] 179129224784.314470 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:47 +0200] 179129224785.244454 34.107.50.145 0 217.154.7.177 443
[ ...
show more
[06/Oct/2026:15:10:47 +0200] 179129224741.765845 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:47 +0200] 179129224784.314470 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:47 +0200] 179129224785.244454 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:48 +0200] 179129224847.167265 34.107.50.145 0 217.154.7.177 443
[06/Oct/2026:15:10:47 +0200] 179129224784.307147 34.107.50.145 0 217.154.7.177 443
...
show less
|
Port Scan
Hacking
Brute-Force
Web App Attack
|
|
๐ต๐ฑ
sefinek.net
|
|
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoint: /index.php | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot โข Generated by: github.c ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoint: /index.php | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
|
Bad Web Bot
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.107.50.145 (145.50.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:29:59.026196 2026] [security2:error] [pid 14581:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.107.50.145 (145.50.107.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 06 08:29:59.026196 2026] [security2:error] [pid 14581:tid 14581] [client 34.107.50.145:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "portfoliolighting.net"] [uri "/.htpasswd"] [unique_id "asTpx6fdDoFIiw1czXUkaAAAAAg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ฉ๐ช
LRob
|
|
Secret file probe | method: GET | path: /.htpasswd | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
|
Hacking
Web App Attack
|