Anonymous
2026-10-23 14:12:34
(3 hours ago)
fail2ban jail apache-scanner: 34.12.157.124 - - [23/Oct/2026:07:12:27 -0700] "GET / HTTP/1.1" 403 44 ...
show more
fail2ban jail apache-scanner: 34.12.157.124 - - [23/Oct/2026:07:12:27 -0700] "GET / HTTP/1.1" 403 4405 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" 34.12.157.124 - - [23/Oct/2026:07:12:28 -0700] "GET /robots.txt HTTP/1.1" 403 465 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 34.12.157.124 - - [23/Oct/2026:07:12:28 -0700] "GET /sitemap.xml HTTP/1.1" 403 465 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 34.12.157.124 - - [23/Oct/2026:07:12:29 -0700] "GET /sitemap_index.xml HTTP/1.1" 403 465 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 34.12.157.124 - - [23/Oct/2026:07:12:31 -0700] "GET /ci HTTP/1.1" 403 465 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Ge
show less
Web App Attack
Port Scan
๐ฉ๐ช
roxyapi
2026-10-23 13:57:04
(3 hours ago)
Honeypot: automated vulnerability scan / web app attack. Last probe: GET /netlify.toml
Web App Attack
Bad Web Bot
Anonymous
2026-10-23 13:30:13
(3 hours ago)
PSCSERV WPSCAN 34.12.157.124
Bad Web Bot
Web App Attack
๐บ๐ธ
kbeezie
2026-10-23 11:35:40
(5 hours ago)
34.12.157.124 - - [23/Oct/2026:07:35:37 -0400] "GET /id_dsa HTTP/1.1" 429 162 "-" "Mozilla/5.0 (comp ...
show more
34.12.157.124 - - [23/Oct/2026:07:35:37 -0400] "GET /id_dsa HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.12.157.124 - - [23/Oct/2026:07:35:37 -0400] "GET /id_rsa HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.12.157.124 - - [23/Oct/2026:07:35:37 -0400] "GET /ssl/server.key HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.12.157.124 - - [23/Oct/2026:07:35:39 -0400] "GET /sign-in HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.12.157.124 - - [23/Oct/2026:07:35:39 -0400] "GET /forgot-password HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-10-23 10:48:26
(6 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.12.157.124 (124.157.12.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:949110) triggered by 34.12.157.124 (124.157.12.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐บ๐ธ
interbiznw.com
2026-10-23 10:42:52
(6 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ฌ๐ง
NotCool
2026-10-23 10:37:49
(6 hours ago)
(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.12.157.124 (NL/The Netherlands/124.157.12.34.bc.go ...
show more
(CRAWLDELAY) Generic Bot Crawl-delay Violation 34.12.157.124 (NL/The Netherlands/124.157.12.34.bc.googleusercontent.com): 50 in the last 3600 secs
show less
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-10-23 09:30:41
(7 hours ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-23 09:19:14
(7 hours ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
Alboweb B.V.
2026-10-23 08:11:04
(9 hours ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-23 07:38:22
(9 hours ago)
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.12.157.124 - - [23/Oct/2026:09:38:16 +0200] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/2.0" 301 319 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 07:32:58
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.12.157.124 (124.157.12.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.12.157.124 (124.157.12.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 03:32:54.383498 2026] [security2:error] [pid 19688:tid 19688] [client 34.12.157.124:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||barryherbach.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "barryherbach.com"] [uri "/z9x8c7v6b5-debug-trigger-barryherbach.com"] [unique_id "atsNpgFJCT3hs9WW85Y_DwAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-23 04:51:45
(12 hours ago)
173 requests with url.path */proc/*
Brute-Force
Bad Web Bot
๐ช๐ธ
pipeline.es
2026-10-23 02:10:46
(15 hours ago)
Web scanning / probing for vulnerable paths | URL: /security | Evidence: futuristravel.com 34.12.157 ...
show more
Web scanning / probing for vulnerable paths | URL: /security | Evidence: futuristravel.com 34.12.157.124 - - [23/Oct/2026:04:10:26 +0200] \"GET /security HTTP/2.0\" 404 23100 \"-\" \"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36\" GEOIP_COUNTRY_CODE=NL 22306 | ASN: GOOGLE-CLOUD-PLATFORM | Country: NL
show less
Port Scan
Web App Attack
๐ณ๐ฑ
maxxsense
2026-10-23 01:54:02
(15 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.12.157.124 (124.157.12.34.bc.googleu ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.12.157.124 (124.157.12.34.bc.googleusercontent.com)
show less
SQL Injection