Anonymous
2026-10-26 00:37:26
(1 hour ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-26 00:02:30
(2 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
BlueWire Hosting
2026-10-25 22:00:31
(4 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ซ๐ท
masterguru
2026-10-25 21:16:06
(4 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-25 20:19:10
(5 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
iwle
2026-10-25 18:12:02
(8 hours ago)
[Sun Oct 25 14:11:55.822016 2026] [:error] [pid 4017620:tid 4017746] [client 34.151.249.114:0] [clie ...
show more
[Sun Oct 25 14:11:55.822016 2026] [:error] [pid 4017620:tid 4017746] [client 34.151.249.114:0] [client 34.151.249.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "uvscards.com"] [uri "/.env.supabase"] [unique_id "at5Ga1bSNxNvdQB500o74AAAAEg"]
[Sun Oct 25 14:12:00.864889 2026] [:error] [pid 62710:tid 62742] [client 34.151.249.114:0] [client 34.151.249.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
dot.mg
2026-10-25 17:05:37
(9 hours ago)
Scan of vulnerable files
Web App Attack
๐ช๐ธ
robotstxt
2026-10-25 08:08:54
(18 hours ago)
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /core/.env HTTP/2.0" 403 16275 "https://data.te ...
show more
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /core/.env HTTP/2.0" 403 16275 "https://data.temporada-alta.com/core/.env" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /.git-credentials HTTP/2.0" 403 16278 "https://data.temporada-alta.com/.git-credentials" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /.git/config HTTP/2.0" 403 16275 "https://data.temporada-alta.com/.git/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /dist/.env HTTP/2.0" 403 16274 "https://data.temporada-alta.com/dist/.env" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.151.249.114 - - [25/Oct/2026:08:08:28 +0000] "GET /docker/.env HTTP/2.0" 403 16277 "https://data.temporada-alta.com/docker/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML
...
show less
Web App Attack
๐ฒ๐ฝ
octageeks.com
2026-10-25 04:13:03
(21 hours ago)
Wordpress malicious attack:[octamissingdomain]
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 04:12:46
(21 hours ago)
[ti-17al] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 28 suspicious requests detected by fail2ban jail apache-404. Example: 34.151.249.114 - - [25/Oct/2026:05:12:29 +0100] "GET /z9x8c7v6b5-debug-trigger-connect.joiabrasserie.nl HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.151.249.114 - - [25/Oct/2026:05:12:29 +0100] "POST /graphql HTTP/2.0" 404 2020 "https://connect.joiabrasserie.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.151.249.114 - - [25/Oct/2026:05:12:29 +0100] "GET /39xcedfxh3v3jdqx7ujj HTTP/2.0" 404 2020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.151.249.114 - - [25/Oct
...
show less
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-10-25 03:49:35
(22 hours ago)
[25/Oct/2026:05:49:35 +0200] -- 34.151.249.114 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET ...
show more
[25/Oct/2026:05:49:35 +0200] -- 34.151.249.114 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /ngsw.json HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-25 03:02:09
(23 hours ago)
34.151.249.114 - - [25/Oct/2026:03:01:48 +0000] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 16291 "https: ...
show more
34.151.249.114 - - [25/Oct/2026:03:01:48 +0000] "GET /@fs/.env?raw&url?? HTTP/2.0" 403 16291 "https://cms.temporada-alta.com/@fs/.env?raw&url??" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.151.249.114 - - [25/Oct/2026:03:01:48 +0000] "GET /@fs/app/.env.local?import&raw?? HTTP/2.0" 403 16297 "https://cms.temporada-alta.com/@fs/app/.env.local?import&raw??" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.151.249.114 - - [25/Oct/2026:03:01:48 +0000] "GET /@fs/.env?url&raw?? HTTP/2.0" 403 16291 "https://cms.temporada-alta.com/@fs/.env?url&raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.151.249.114 - - [25/Oct/2026:03:01:48 +0000] "GET /@fs/app/.env.local?import&raw?? HTTP/2.0" 403 16297 "https://cms.temporada-alta.com/@fs/app/.env.local?import&raw??" "Mozilla/5.0 (Macintosh; In
...
show less
Web App Attack
๐น๐ท
eryilmaz
2026-10-25 02:00:40
(1 day ago)
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. / ...
show more
Automated attack blocked by eryilmaz WAF/fail2ban: 1 event(s) [waf.block] in the last 1 days, e.g. /cc.js
show less
Web App Attack
Hacking
Anonymous
2026-10-25 01:52:53
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.151.249.114 (BR/Brazil/114.249.151.3 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.151.249.114 (BR/Brazil/114.249.151.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ช๐ธ
robotstxt
2026-10-24 23:50:12
(1 day ago)
34.151.249.114 - - [24/Oct/2026:23:50:02 +0000] "GET /api/.env HTTP/2.0" 403 16275 "https://br.tempo ...
show more
34.151.249.114 - - [24/Oct/2026:23:50:02 +0000] "GET /api/.env HTTP/2.0" 403 16275 "https://br.temporada-alta.com/api/.env" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.151.249.114 - - [24/Oct/2026:23:50:02 +0000] "GET /admin/.env HTTP/2.0" 403 16275 "https://br.temporada-alta.com/admin/.env" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.151.249.114 - - [24/Oct/2026:23:50:03 +0000] "GET /server/.env HTTP/2.0" 403 16276 "https://br.temporada-alta.com/server/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.151.249.114 - - [24/Oct/2026:23:50:03 +0000] "GET /dist/.env HTTP/2.0" 403 16274 "https://br.temporada-alta.com/dist/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.151.249.114 - - [24/Oct/2026:23:50:03 +0000] "GET /core/.env HTTP/2.0" 403 16275 "h
...
show less
Web App Attack