|
🇳🇱
Alt255
|
|
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 34.7.148.182 - - [25/Oct/2026:02:01:41 +0200] "GET /z9x8c7v6b5-debug-trigger-account.petersbno.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (co ...
show more
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 34.7.148.182 - - [25/Oct/2026:02:01:41 +0200] "GET /z9x8c7v6b5-debug-trigger-account.petersbno.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.7.148.182 - - [25/Oct/2026:02:01:42 +0200] "GET /ucaquiknhynfr4vsg91m HTTP/1.1" 404 3632 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.7.148.182 - - [25/Oct/2026:02:01:43 +0200] "GET /yu927rmyjew7gl18cbex HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.7.148.182 - - [25/Oct/2026:02:01:43 +0200] "GET /serviceAccountKey.json HTTP/1.1" 404 3632 "-" "Mozilla/5.0 (compatible; KimiBot/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇫🇷
arteagasoft
|
|
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.git/config" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" "-"
[26/Oct/2026 ...
show more
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.git/config" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected])" "-"
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.aws/config" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-"
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.git-credentials" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "-"
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.git/HEAD" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "-"
[26/Oct/2026:09:18:01 +0000] 404 - GET http easywassap.com "/.gitlab-ci.yml" [Client 34.7.148.182] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Kim
...
show less
|
Brute-Force
|
|
🇫🇮
sibahota
|
|
34.7.148.182 - - [26/Oct/2026:03:49:38 +0000] apexbyteit.com "GET /gcp-credentials.json HTTP/1.1" 200 463 0.001 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 172.17.0.1:3030 200 0.002 "http://apexbyteit.com/gcp-credential ...
show more
34.7.148.182 - - [26/Oct/2026:03:49:38 +0000] apexbyteit.com "GET /gcp-credentials.json HTTP/1.1" 200 463 0.001 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 172.17.0.1:3030 200 0.002 "http://apexbyteit.com/gcp-credentials.json"
...
show less
|
Web App Attack
Brute-Force
|
|
🇧🇪
boxed-it
|
|
GET /console (Tarpitted for 11s, wasted 720B)
|
Web App Attack
|
|
🇺🇸
CDO
|
|
URL Injection attempt detected. Automated web attack.
|
Hacking
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
Anonymous
|
|
malicious scanning tool activity
|
Web App Attack
|
|
Anonymous
|
|
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: NL, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.7.148.182 (182.148.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:05:35.782477 2026] [security2:error] [pid 13248:tid 13 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.148.182 (182.148.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:05:35.782477 2026] [security2:error] [pid 13248:tid 13248] [client 34.7.148.182:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||apcalculusexamprep.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "apcalculusexamprep.com"] [uri "/z9x8c7v6b5-debug-trigger-apcalculusexamprep.com"] [unique_id "at4avym070I2kgp-u6VoqwAAADw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query Detection of too many failed responses.
|
Brute-Force
Bad Web Bot
Hacking
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
CrowdSec detection: crowdsecurity/http-sensitive-files
|
Web App Attack
|
|
🇺🇸
Ar1s
|
|
[1:2061026] ET WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927) ::: Port: 80/TCP
|
Exploited Host
|
|
🇸🇬
Cloudkul Cloudkul
|
|
Attempted Brute Force on our application
|
Brute-Force
Web App Attack
|
