🇩🇪
Philister11
2026-10-07 00:49:42
(2 weeks ago)
CrowdSec: LePresidente/http-generic-403-bf (US/AS396982)
Web App Attack
Brute-Force
🇩🇪
Gwyneth Llewelyn
2026-10-06 20:41:49
(2 weeks ago)
2026/10/06 21:41:47 [error] 3069275#3069275: *654420 access forbidden by rule, client: 34.63.228.9, ...
show more
2026/10/06 21:41:47 [error] 3069275#3069275: *654420 access forbidden by rule, client: 34.63.228.9, server: bot.betatechnologies.info, request: "GET /build../.env HTTP/2.0", host: "bot.betatechnologies.info"
2026/10/06 21:41:47 [error] 3069275#3069275: *654420 access forbidden by rule, client: 34.63.228.9, server: bot.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "bot.betatechnologies.info"
2026/10/06 21:41:48 [error] 3069275#3069275: *654420 access forbidden by rule, client: 34.63.228.9, server: bot.betatechnologies.info, request: "GET /files../.env HTTP/2.0", host: "bot.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-06 17:53:42
(2 weeks ago)
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.63.228.9 - - [06/Oct/2026:19:53:29 +0200] "GET /dashboard HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.63.228.9 - - [06/Oct/2026:19:53:29 +0200] "GET /auth/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.63.228.9 - - [06/Oct/2026:19:53:29 +0200] "GET /signin HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.63.228.9 - - [06/Oct/2026:19:53:29 +0200] "GET /secure HTTP/2.0" 40
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-10-06 17:12:22
(2 weeks ago)
34.63.228.9 - - [06/Oct/2026:19:12:22 +0200] "GET /login HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows ...
show more
34.63.228.9 - - [06/Oct/2026:19:12:22 +0200] "GET /login HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.63.228.9 - - [06/Oct/2026:19:12:22 +0200] "GET /sign-in HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 34.63.228.9 - - [06/Oct/2026:19:12:22 +0200] "GET /admin HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Brute-Force
🇮🇹
VHosting
2026-10-06 15:45:04
(2 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-06 15:05:47
(2 weeks ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.h ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot (+11 more) | path: /k80sq90fjses7bo07rki, /assets/manifest.json, /manifest.json (+17 more)
show less
Bad Web Bot
🇺🇸
n2nguyenn2nguyen
2026-10-06 14:33:41
(2 weeks ago)
Blocked by YFC Security on https://1904.brixzly.com — type: rapid_scan_attempts
Web App Attack
2026-10-06 13:42:48
(2 weeks ago)
[Tue Oct 06 15:42:44.364521 2026] [authz_core:error] [pid 2290318:tid 2290318] [client 34.63.228.9:0 ...
show more
[Tue Oct 06 15:42:44.364521 2026] [authz_core:error] [pid 2290318:tid 2290318] [client 34.63.228.9:0] AH01630: client denied by server configuration: /var/www/wordpress/loretlargent.info/server-status, referer: https://loretlargent.info/server-status
[Tue Oct 06 15:42:45.377869 2026] [access_compat:error] [pid 2290388:tid 2290388] [client 34.63.228.9:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.dockerenv, referer: https://loretlargent.info/.dockerenv
[Tue Oct 06 15:42:45.595270 2026] [access_compat:error] [pid 2289383:tid 2289383] [client 34.63.228.9:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/credentials
[Tue Oct 06 15:42:45.650626 2026] [access_compat:error] [pid 2291287:tid 2291287] [client 34.63.228.9:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/config
[Tue Oct 0
...
show less
Web Spam
Web App Attack
2026-10-06 13:17:15
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇺🇸
technojoe99
2026-10-06 12:55:59
(2 weeks ago)
Exploit scan from 34.63.228.9. GET /zgt1kb27lhiucaa4uhub HTTP/2.0.
Web App Attack
🇩🇪
altenglaner
2026-10-06 12:54:37
(2 weeks ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇳🇱
debestelapp
2026-10-06 12:50:07
(2 weeks ago)
Web App Attack
🇺🇸
Mundo Bueno
2026-10-06 12:43:51
(2 weeks ago)
[ISILIA Protection v2.3] Tentative d'accès: /static//.env [RATE LIMITED - 1800s quarantine] | Pays: ...
show more
[ISILIA Protection v2.3] Tentative d'accès: /static//.env [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)
show less
Hacking
Web App Attack
2026-10-06 12:30:09
(2 weeks ago)
34.63.228.9 - - [06/Oct/2026:14:29:57 +0200] "GET /.env.bak HTTP/2.0" 403 272 "-" "Mozilla/5.0 (comp ...
show more
34.63.228.9 - - [06/Oct/2026:14:29:57 +0200] "GET /.env.bak HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
🇩🇪
palzer.IT
2026-10-06 12:25:15
(2 weeks ago)
Fail2ban automatic report for plesk-apache-badbot: 34.63.228.9 - - [06/Oct/2026:14:24:45 +0200] GET ...
show more
Fail2ban automatic report for plesk-apache-badbot: 34.63.228.9 - - [06/Oct/2026:14:24:45 +0200] GET /pg7gpfhm4d6uo9428a8v [DOMAIN_REMOVED] 404 5207 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +[DOMAIN_REMOVED]
show less
Bad Web Bot