🇳🇱
Alt255
2026-10-26 21:13:39
(15 hours ago)
[ti-14al] Web exploit scanning: 8 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 8 suspicious requests detected by fail2ban jail <name>. Example: 34.126.69.104 - - [24/Oct/2026:22:21:58 +0200] "GET /web/.env HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.126.69.104 - - [24/Oct/2026:22:21:58 +0200] "GET /docker/.env HTTP/1.1" 404 3632 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.126.69.104 - - [24/Oct/2026:22:21:58 +0200] "GET /api/.env HTTP/1.1" 404 3632 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.126.69.104 - - [24/Oct/2026:22:21:58 +0200] "GET /config/.env HTTP/1.1" 404 3632 "-"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-26 09:11:37
(1 day ago)
(mod_security) mod_security (id:930120) triggered by 34.126.69.104 (SG/Singapore/104.69.126.34.bc.go ...
show more
(mod_security) mod_security (id:930120) triggered by 34.126.69.104 (SG/Singapore/104.69.126.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-26 05:30:10
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
Alt255
2026-10-26 05:22:49
(1 day ago)
[ti-29al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-29al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.126.69.104 - - [26/Oct/2026:06:22:35 +0100] "GET /.aws/credentials HTTP/2.0" 404 1710 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.126.69.104 - - [26/Oct/2026:06:22:35 +0100] "GET /.git/HEAD HTTP/2.0" 404 547 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.126.69.104 - - [26/Oct/2026:06:22:35 +0100] "GET /.git/config HTTP/2.0" 404 547 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.126.69.104 - - [26/Oct/2026:06:22:35 +0100] "GET /docker/.env HTTP/2.0" 403 550 "-" "Mozilla/5.0 (compatible; Brav
...
show less
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-10-25 19:18:05
(1 day ago)
GET /.env?raw (Tarpitted for 1d15h8m27s, wasted 8.06MB)
Web App Attack
🇧🇪
sid3windr
2026-10-25 18:14:01
(1 day ago)
GET /@fs/../.env?raw?? (Tarpitted for 1d15h10m28s, wasted 8.06MB)
Web App Attack
🇺🇸
TPI-Abuse
2026-10-25 15:52:03
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.126.69.104 (104.69.126.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.126.69.104 (104.69.126.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 11:51:57.282020 2026] [security2:error] [pid 30169:tid 30169] [client 34.126.69.104:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/core/.env"] [unique_id "at4lnZQgD4DZRV6rWP3PogAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-10-25 12:50:46
(2 days ago)
GET /.git/HEAD (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇧🇪
taivas.nl
2026-10-25 05:38:28
(2 days ago)
Many_bad_calls
Web App Attack
🇳🇱
Alt255
2026-10-25 03:02:43
(2 days ago)
[ti-17al] Excessive 404 errors (web scanning): 30 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 30 suspicious requests detected by fail2ban jail apache-404. Example: 34.126.69.104 - - [25/Oct/2026:04:02:35 +0100] "GET /z9x8c7v6b5-debug-trigger-cn.joiabrasserie.nl HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.126.69.104 - - [25/Oct/2026:04:02:35 +0100] "GET /984wz2ebalet5pqe0a2f HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.126.69.104 - - [25/Oct/2026:04:02:35 +0100] "GET /h8arbdcoiyx87isdlyv6 HTTP/2.0" 404 2020 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.126.69.104 - - [25/Oct/2026:04:02:36 +0100] "POST /graphql HTTP/2.0" 404 2020 "https://cn.joiabrasserie.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Sa
...
show less
Bad Web Bot
Web App Attack
🇫🇷
regishoussin
2026-10-25 02:23:00
(2 days ago)
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100180): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-10-25 02:23 UTC.
show less
Bad Web Bot
Web App Attack
2026-10-24 22:24:18
(2 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇫🇷
tecnicorioja
2026-10-24 22:01:20
(2 days ago)
(Mod_security)
Web App Attack
Brute-Force
Bad Web Bot
🇩🇪
raph
2026-10-24 20:28:40
(2 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-24 20:22:15
(2 days ago)
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.126.69.104 - - \[24/Oct/2026:22:21:58 +0200\] "GET /web/.env HTTP/1.1" 404 2105 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/17.0 Safari/605.1.15 \(Applebot/0.1\; +http://www.apple.com/go/applebot\)"
34.126.69.104 - - \[24/Oct/2026:22:21:58 +0200\] "GET /docker/.env HTTP/1.1" 404 3632 "-" "Mozilla/5.0 \(compatible\; Kimi-SearchBot/1.0\; +https://kimi.ai/\)"
...
show less
Bad Web Bot
Web App Attack