🇳🇱
Alt255
2026-10-15 10:40:17
(1 week ago)
[live2bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.128.114.48 - - [15/Oct/2026:12:40:04 +0200] "GET /.env HTTP/1.1" 404 7818 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWeb ...
show more
[live2bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.128.114.48 - - [15/Oct/2026:12:40:04 +0200] "GET /.env HTTP/1.1" 404 7818 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-15 10:10:10
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇵🇱
gandaflux
2026-10-15 02:08:12
(1 week ago)
34.128.114.48 [redacted-domain] - [15/Oct/2026:04:08:10 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
34.128.114.48 [r ...
show more
34.128.114.48 [redacted-domain] - [15/Oct/2026:04:08:10 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
34.128.114.48 [redacted-domain] - [15/Oct/2026:04:08:10 +0200] "GET /.env HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Safari/605.1.15"
34.128.114.48 [redacted-domain] - [15/Oct/2026:04:08:11 +0200] "GET /.env.local HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
show less
Web App Attack
🇯🇵
stypr
2026-10-14 21:03:31
(1 week ago)
Malicious activity detected on HTTP/HTTPS
Hacking
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-10-14 20:18:46
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
CBJ
2026-10-14 19:40:11
(1 week ago)
fail2ban: apache-filepath-recon
...
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-14 18:06:54
(2 weeks ago)
2026/10/14 19:06:52 [error] 4060693#4060693: *3254989 access forbidden by rule, client: 34.128.114.48, server: [redacted], request: "GET /.env HTTP/2.0", host: "eyeondance.vp-arc.org"
2026/10/14 19:06:52 [error] 4060693#4060693: *3254989 access forbi ...
show more
2026/10/14 19:06:52 [error] 4060693#4060693: *3254989 access forbidden by rule, client: 34.128.114.48, server: [redacted], request: "GET /.env HTTP/2.0", host: "eyeondance.vp-arc.org"
2026/10/14 19:06:52 [error] 4060693#4060693: *3254989 access forbidden by rule, client: 34.128.114.48, server: [redacted], request: "GET /.env HTTP/2.0", host: "eyeondance.vp-arc.org"
34.128.114.48 - - [14/Oct/2026:19:06:52 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0"
show less
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-10-14 15:18:53
(2 weeks ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-14 UTC.
Hacking
🇦🇺
AWW-Admin
2026-10-14 07:59:40
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.128.114.48 (ID/Indonesia/48.114.128.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Savvii
2026-10-14 06:24:56
(2 weeks ago)
15 attempts against mh-modsecurity-ban on byrd
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-14 03:15:03
(2 weeks ago)
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.128.114.48 - - [14/Oct/2026:05:14:55 +0200] "GET /.env HTTP/1.1" 404 7842 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWeb ...
show more
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.128.114.48 - - [14/Oct/2026:05:14:55 +0200] "GET /.env HTTP/1.1" 404 7842 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-14 02:24:49
(2 weeks ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.128.114.48 (ID/Indonesia/48.114.128.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/14 04:24:46 [error] 2596298#25962 ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.128.114.48 (ID/Indonesia/48.114.128.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/14 04:24:46 [error] 2596298#2596298: *3219186 access forbidden by rule, client: 34.128.114.48, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "mail.italpmiabruzzo.it"
2026/10/14 04:24:46 [error] 2596291#2596291: *3219187 access forbidden by rule, client: 34.128.114.48, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "mail.italpmiabruzzo.it"
2026/10/14 04:24:47 [error] 2596298#2596298: *3219186 access forbidden by rule, client: 34.128.114.48, server: italpmiabruzzo.conapipescara.it, request: "GET /wp-config.php.old HTTP/1.1", host: "mail.italpmiabruzzo.it"
show less
Port Scan
🇩🇪
Viveronese
2026-10-13 20:33:37
(2 weeks ago)
HTTP vulnerability scanning
Web App Attack
🇳🇱
ConsulHosting
2026-10-12 20:18:26
(2 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
baltic-lab.com
2026-10-12 17:42:04
(2 weeks ago)
Firewall Detection, DE2, Either a port scan or continued brute-force attack by a previously blocked offender
...
Brute-Force
Port Scan
