๐ต๐ฑ
swiszczu
2026-10-14 20:20:20
(3 hours ago)
Fail2Ban automatic report:
Multiple forbidden requests in short amount of time:
34.104.136.192 - - [ ...
show more
Fail2Ban automatic report:
Multiple forbidden requests in short amount of time:
34.104.136.192 - - [14/Oct/2026:22:20:20 +0200] "GET /.env.local?import&raw HTTP/2.0" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" "-"
34.104.136.192 - - [14/Oct/2026:22:20:20 +0200] "GET /.env?import&raw HTTP/2.0" 403 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" "-"
34.104.136.192 - - [14/Oct/2026:22:20:20 +0200] "GET /.env.development?import&raw HTTP/2.0" 403 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-"
34.104.136.192 - - [14/Oct/2026:22:20:20 +0200] "GET /.env.production?raw HTTP/2.0" 403 153 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "-"
34.104.136.192 - - [14/Oct/2026:22
show less
Hacking
Web App Attack
๐ช๐ธ
robotstxt
2026-10-14 20:14:56
(3 hours ago)
34.104.136.192 - - [14/Oct/2026:20:14:31 +0000] "GET / HTTP/2.0" 403 38905 "https://ccoo.cat" "Mozil ...
show more
34.104.136.192 - - [14/Oct/2026:20:14:31 +0000] "GET / HTTP/2.0" 403 38905 "https://ccoo.cat" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.104.136.192" edge="172.71.24.49"
34.104.136.192 - - [14/Oct/2026:20:14:34 +0000] "GET /robots.txt HTTP/2.0" 403 93 "https://ccoo.cat/robots.txt" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "34.104.136.192" edge="172.64.215.44"
34.104.136.192 - - [14/Oct/2026:20:14:35 +0000] "GET /asset-manifest.json HTTP/2.0" 403 34540 "https://ccoo.cat/asset-manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.104.136.192" edge="172.71.24.49"
34.104.136.192 - - [14/Oct/2026:20:14:35 +0000] "GET /dist/manifest.json HTTP/2.0" 403 34404
...
show less
Web App Attack
๐ง๐ช
voormedia
2026-10-14 19:39:50
(4 hours ago)
Accessed trap at '/.env'
Web App Attack
๐ง๐ช
cmbplf
2026-10-14 17:40:07
(6 hours ago)
398 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐ณ๐ฑ
GabrielJST
2026-10-14 16:54:58
(7 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.104.136.192 (JP/Japan/192.136.104.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.104.136.192 (JP/Japan/192.136.104.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ณ๐ฑ
Savvii
2026-10-14 16:47:43
(7 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-14 16:36:26
(7 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 15:53:54
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.136.192 (192.136.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.136.192 (192.136.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 11:53:49.355732 2026] [security2:error] [pid 22978:tid 22978] [client 34.104.136.192:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.link"] [uri "/_image"] [unique_id "as-ljdfn3Yb_p34UNJBnKwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
CaduVet
2026-10-14 14:55:30
(9 hours ago)
2026-10-14 14:57:10,258 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.104.136. ...
show more
2026-10-14 14:57:10,258 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.104.136.192
2026-10-14 16:16:46,483 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.104.136.192
2026-10-14 16:55:28,149 fail2ban.actions \[2606\]: NOTICE \[http-overflows\] Ban 34.104.136.192
...
show less
Brute-Force
Anonymous
2026-10-14 14:42:34
(9 hours ago)
[ns41.kdns.gr] httpd-config-scan: sites=sostis.gr; logs=/var/log/httpd/domains/sostis.gr.log; sample ...
show more
[ns41.kdns.gr] httpd-config-scan: sites=sostis.gr; logs=/var/log/httpd/domains/sostis.gr.log; samples=/.env.supabase | /service-account.json | /terraform.tfstate
show less
Hacking
Web App Attack
Anonymous
2026-10-14 14:37:22
(9 hours ago)
Web application attack.
Hacking
๐ฉ๐ช
updown.io
2026-10-14 14:24:01
(9 hours ago)
{"level":"info","ts":1791987838.802191,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791987838.802191,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.104.136.192","remote_port":"43848","client_ip":"34.104.136.192","proto":"HTTP/2.0","method":"GET","host":"status.tintwiz.com","uri":"/manifest.json","headers":{"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Priority":["u=0, i"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Site":["none"],"Sec-Fetch-Dest":["document"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Microsoft Edge\";v=\"152\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Language":["en-US,en;q=0.9"],"Upgrade-Insecure-Requests":["1"],"Sec-Ch-Ua-Mobile":["?0"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"],"Accept":["text/html,ap
...
show less
DDoS Attack
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-14 13:36:07
(10 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
Anonymous
2026-10-14 13:16:38
(10 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
e.fierstra
2026-10-14 13:12:50
(10 hours ago)
excessive HTTP 404 errors
Bad Web Bot