🇳🇱
Alt255
2026-09-19 14:39:27
(1 day ago)
[ti-24al] Excessive 404 errors (web scanning): 41 suspicious requests detected by fail2ban jail apac ...
show more
[ti-24al] Excessive 404 errors (web scanning): 41 suspicious requests detected by fail2ban jail apache-404. Example: 34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /.claude/.credentials.json HTTP/1.1" 404 7881 "-" "crusader-worker/1.0"
34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /old/.claude.json HTTP/1.1" 404 2684 "-" "crusader-worker/1.0"
34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /bak/.codex/auth.json HTTP/1.1" 404 7881 "-" "crusader-worker/1.0"
34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /backup/.claude/credentials.json HTTP/1.1" 404 7881 "-" "crusader-worker/1.0"
34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /backup/.claude.json HTTP/1.1" 404 7881 "-" "crusader-worker/1.0"
34.14.36.2 - - [19/Sep/2026:16:39:19 +0200] "GET /old/.claude/credentials.json HTTP
...
show less
Bad Web Bot
Web App Attack
🇫🇷
ACE-INFORMATIQUE.NC
2026-09-17 19:00:09
(3 days ago)
Web App Attack blocked by Fail2ban
Web App Attack
🇨🇦
polycoda
2026-09-17 15:26:24
(3 days ago)
🔑 Probes for xmlrpc.php everywhere
Hacking
Web App Attack
🇪🇸
robotstxt
2026-09-17 15:07:55
(3 days ago)
34.14.36.2 - - [17/Sep/2026:15:06:56 +0000] "GET /ciprianogarcia/estudis//wp-includes/id3/license.tx ...
show more
34.14.36.2 - - [17/Sep/2026:15:06:56 +0000] "GET /ciprianogarcia/estudis//wp-includes/id3/license.txt/xmlrpc.php?rsd HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "34.14.36.2" edge="172.71.232.92"
34.14.36.2 - - [17/Sep/2026:15:06:56 +0000] "GET /ciprianogarcia/estudis//wp-includes/id3/license.txt/blog/wp-includes/wlwmanifest.xml HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "34.14.36.2" edge="172.71.232.92"
34.14.36.2 - - [17/Sep/2026:15:06:57 +0000] "GET /ciprianogarcia/estudis//wp-includes/id3/license.txt/web/wp-includes/wlwmanifest.xml HTTP/2.0" 403 2 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36" "34.14.36.2" edge="172.71.232.92"
34.14.36.2 - - [17/Sep/2026:15:06:57 +0000] "GET /ciprianogarcia/estudis//wp-includes/id3/license.txt
...
show less
Web App Attack
🇪🇪
Tsumugi Kotobuki
2026-09-17 15:06:50
(3 days ago)
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 122 | Len: 52B | Win: ...
show more
Port Scan on Honeypot | Ports: 80/HTTP | Proto: TCP(1) | Flags: all SYN | TTL: 122 | Len: 52B | Win: 65320(1) | rDNS: 2.36.14.34.bc.googleusercontent.com | F2B/ufw-honeypot@2026-09-17T15:06:50Z
show less
Port Scan
Hacking
🇩🇪
bescared
2026-09-17 15:02:26
(3 days ago)
F2B - Malicious activity detected. URL Probing. -8ff06ede-
Hacking
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-09-17 15:01:55
(3 days ago)
(mod_security) mod_security (id:210410) triggered by 34.14.36.2 (BE/Belgium/2.36.14.34.bc.googleuser ...
show more
(mod_security) mod_security (id:210410) triggered by 34.14.36.2 (BE/Belgium/2.36.14.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-09-17 14:59:15
(3 days ago)
15 attempts against mh-misc-ban on ficus
Web App Attack
🇳🇴
jad-abuse
2026-09-17 14:54:56
(3 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. O ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: xmlrpc. Observed by 1 sensor(s); 17 hits.
show less
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-17 14:49:39
(3 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
LRob
2026-09-17 14:48:16
(3 days ago)
Asking over plain http and never following the redirect served — a crawler that reads nothing it ask ...
show more
Asking over plain http and never following the redirect served — a crawler that reads nothing it asks for | method: GET | path: / | 2026-09-17 14:48 UTC
show less
Bad Web Bot
🇨🇭
backslash
2026-09-17 14:48:00
(3 days ago)
block ruleset bad bot: wordpress scans 82C095539D4FDAF84E2E2FD6B6FC0664645851A8
Bad Web Bot
🇹🇷
eryilmaz
2026-09-17 14:46:48
(3 days ago)
Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: auto, path: /blog/wp-inclu ...
show more
Automated attack blocked by eryilmaz WAF/defense engine (level 1, source: auto, path: /blog/wp-includes/wlwmanifest.xml)
show less
Web App Attack
Hacking
🇨🇭
lufi
2026-09-17 14:45:50
(3 days ago)
2026-09-17T16:45:49+02:00 lufischer04 ids442 2026-09-17 16:45:49 34.14.36.2: blacklisted Pattern: wp ...
show more
2026-09-17T16:45:49+02:00 lufischer04 ids442 2026-09-17 16:45:49 34.14.36.2: blacklisted Pattern: wp-includes/
...
show less
Web Spam
Brute-Force
Hacking
Web App Attack
🇨🇦
polycoda
2026-09-17 14:39:51
(3 days ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) - ↪️ Exc ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based) - ↪️ Excessive 30X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack