๐ณ๐ฑ
Alt255
2026-10-24 02:57:43
(19 hours ago)
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx03al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.148.69.134 - - [24/Oct/2026:04:57:39 +0200] "GET /build/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-23 18:08:44
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.148.69.134 (134.69.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.69.134 (134.69.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 14:08:40.714441 2026] [security2:error] [pid 14821:tid 14821] [client 34.148.69.134:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||haywardcarpentry.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "haywardcarpentry.com"] [uri "/z9x8c7v6b5-debug-trigger-haywardcarpentry.com"] [unique_id "atuiqFJ3WWrVL5G9R9FiFgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-23 12:30:04
(1 day ago)
34.148.69.134 - - [23/Oct/2026:07:30:02 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla ...
show more
34.148.69.134 - - [23/Oct/2026:07:30:02 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 104.22.24.142
34.148.69.134 - - [23/Oct/2026:07:30:02 -0500] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 108.162.238.110
34.148.69.134 - - [23/Oct/2026:07:30:02 -0500] "GET /.env.keys HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 104.22.24.142
34.148.69.134 - - [23/Oct/2026:07:30:03 -0500] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 104.22.24.142
34.148.69.134 - - [23/Oct/2026:07:30:03 -0500] "GET /.env.production.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexity
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-10-23 12:07:59
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-23 10:35:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-10-23 10:04:41
(1 day ago)
Technology fingerprinting | method: GET, POST | path: /czy7d6lm3h4y03b0snnh, /ngsw.json, /hb7kdz29eu ...
show more
Technology fingerprinting | method: GET, POST | path: /czy7d6lm3h4y03b0snnh, /ngsw.json, /hb7kdz29eux7yk99xjbd (+3 more) | ua: Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0, Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
show less
Port Scan
Web App Attack
๐จ๐ฆ
SSH-Admin
2026-10-23 09:09:59
(1 day ago)
Probing for Exploits on ns153
Exploited Host
Web App Attack
๐จ๐ฆ
Mediashaker
2026-10-23 08:51:07
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.148.69.134 (US/Un ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.148.69.134 (US/United States/134.69.148.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ง๐ช
cmbplf
2026-10-23 01:20:19
(1 day ago)
120 requests with url.path */proc/*
Brute-Force
Bad Web Bot
Anonymous
2026-10-23 01:19:19
(1 day ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
masterguru
2026-10-23 01:14:35
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:user-agent. (1100000-169)
show less
Bad Web Bot
๐บ๐ธ
mnsf
2026-10-23 01:07:18
(1 day ago)
Too many Status 40X (23)
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-10-23 00:12:17
(1 day ago)
Too many Status 40X (37)
Scanning/Probing (32)
Request Overload (115)
Brute-Force
Web App Attack
Anonymous
2026-10-22 20:15:36
(2 days ago)
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/static/..;/.env | /.//.en ...
show more
[ssd5.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/static/..;/.env | /.//.env | /build../.env
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 16:57:38
(2 days ago)
Excessive 404/403 errors
Brute-Force