๐ง๐ช
FrankNeirynck
2026-09-15 09:40:01
(17 hours ago)
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /z9x8c7v6b5-debug-trigger-aifebe ...
show more
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /z9x8c7v6b5-debug-trigger-aifebelco.ttl.be HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 0.001
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /@fs/proc/self/cmdline?raw?? HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 0.002
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/1.1" 404 1317 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 0.001
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-09-14 08:29:01
(1 day ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฎ๐ณ
evicky2002
2026-09-14 06:00:01
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-14 02:24:46
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ฑ
Savvii
2026-09-13 22:39:49
(2 days ago)
20 attempts against mh-misbehave-ban on tilia
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
delabiemedia.be
2026-09-13 22:17:20
(2 days ago)
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /rclone.conf HTTP/1.1" 404 134 "-" "Mozilla/5.0 A ...
show more
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /rclone.conf HTTP/1.1" 404 134 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /reset-password HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /backoffice HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /z9x8c7v6b5-debug-trigger-download.delabiemedia.be HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.121.254.6 - - [14/Sep/2026:00:17:19 +0200] "GET /admin%2F.env HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-13 18:10:36
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-09-13 17:51:06
(2 days ago)
28 attempts against mh-misbehave-ban on ec102966
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
Savvii
2026-09-13 17:22:28
(2 days ago)
20 attempts against mh-misbehave-ban on escape
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-13 10:53:18
(2 days ago)
[Sun Sep 13 10:53:17.388696 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:3535 ...
show more
[Sun Sep 13 10:53:17.388696 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:35358] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/
[Sun Sep 13 10:53:17.498734 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:35358] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/sign-in
[Sun Sep 13 10:53:17.604334 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:35358] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/z9x8c7v6b5-debug-trigger-api.erp.alieninternet.be
[Sun Sep 13 10:53:17.710119 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:35358] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htdocs/auth
[Sun Sep 13 10:53:17.818222 2026] [authz_core:error] [pid 42690:tid 42690] [client 34.121.254.6:35358] AH01630: client denied by server configuration: /var/www/erp.alieninternet.be/htd
...
show less
Brute-Force
๐ง๐ช
FrankNeirynck
2026-09-13 10:18:47
(2 days ago)
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /z9x8c7v6b5-debug-trigger-aifebe ...
show more
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /z9x8c7v6b5-debug-trigger-aifebelco.ttl.be HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)" 0.001
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /@fs/proc/self/cmdline?raw?? HTTP/1.1" 404 1317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 0.002
aifebelco.ttl.be 34.121.254.6 - - [13/Sep/2026:12:18:46 +0200] "GET /@fs/var/run/secrets/kubernetes.io/serviceaccount/token?raw?? HTTP/1.1" 404 1317 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 0.001
...
show less
Hacking
Web App Attack
๐ง๐ช
webbie
2026-09-13 08:46:01
(2 days ago)
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /.env.example HTTP/1.1" 404 403 "-" "Mozilla/5.0 ...
show more
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /.env.example HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /.aws/config HTTP/1.1" 404 403 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /wp-json HTTP/1.1" 404 6270 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /z9x8c7v6b5-debug-trigger-84-198-24-70.access.telenet.be HTTP/1.1" 404 403 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)"
34.121.254.6 - - [13/Sep/2026:10:46:00 +0200] "GET /.aws/credentials HTTP/1.1" 404 6270 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
...
show less
Brute-Force
Web App Attack
๐ง๐ช
delabiemedia.be
2026-09-13 08:45:30
(2 days ago)
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 ( ...
show more
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/config HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.121.254.6 - - [13/Sep/2026:10:45:29 +0200] "GET /.git/HEAD HTTP/1.1" 404 134 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /auth HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /secure HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.121.254.6 - - [13/Sep/2026:10:45:30 +0200] "GET /admin/login HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-13 08:04:48
(2 days ago)
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.121.254.6 - - [13/Sep/2026:10:04:47 +0200] "GET /@fs/.env?url&raw?? HTTP/2.0" 301 293 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-13 07:57:26
(2 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack