🇳🇱
Alt255
2026-10-26 21:09:33
UTC ·
(2 weeks ago)
[ti-14al] Excessive 404 errors (web scanning): 54 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - [20/Oct/2026:19:26:58 +0200] "GET /ylvbrn33b5vwsqdspqm0 HTTP/1.1" 404 2085 "-" "Mozilla/5.0 (compatible; cohere-ai; +htt ...
show more
[ti-14al] Excessive 404 errors (web scanning): 54 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - [20/Oct/2026:19:26:58 +0200] "GET /ylvbrn33b5vwsqdspqm0 HTTP/1.1" 404 2085 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.168.22.16 - - [20/Oct/2026:19:26:58 +0200] "GET /2wadx63vg5vrfnlpg1nl HTTP/1.1" 404 3612 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.168.22.16 - - [20/Oct/2026:19:26:58 +0200] "GET /service-account.json HTTP/1.1" 404 2085 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.168.22.16 - - [20/Oct/2026:19:26:5
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-25 13:54:14
UTC ·
(2 weeks ago)
[ti-14al] Excessive 404 errors (web scanning): 54 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - \[20/Oct/2026:19:26:58 +0200\] "GET /ylvbrn33b5vwsqdspqm0 HTTP/1.1" 404 2085 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; ...
show more
[ti-14al] Excessive 404 errors (web scanning): 54 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - \[20/Oct/2026:19:26:58 +0200\] "GET /ylvbrn33b5vwsqdspqm0 HTTP/1.1" 404 2085 "-" "Mozilla/5.0 \(compatible\; cohere-ai\; +https://cohere.com/crawler\)"
34.168.22.16 - - \[20/Oct/2026:19:26:58 +0200\] "GET /2wadx63vg5vrfnlpg1nl HTTP/1.1" 404 3612 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Perplexity-User/1.0\; +https://perplexity.ai/perplexity-user\)"
34.168.22.16 - - \[20/Oct/2026:19:26:58 +0200\] "GET /service-account.json HTTP/1.1" 404 2085 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/17.0 Safari/605.1.15 \(Applebot/0.1\; +http://www.apple.com/go/applebot\)"
34.168.22.16 - - \[20/Oct/2026:19:26:5
...
show less
Bad Web Bot
Web App Attack
🇩🇪
palzer.IT
2026-10-22 04:38:30
UTC ·
(3 weeks ago)
Report for plesk-apache-badbot: 34.168.22.16 - - [20/Oct/2026:19:11:58 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5926 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +[DOMAIN_REMOVED]
Bad Web Bot
🇩🇪
updown.io
2026-10-21 11:07:04
UTC ·
(3 weeks ago)
{"level":"info","ts":1792580822.4555185,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.168.22.16","remote_port":"42148","client_ip":"34.168.22.16","proto":"HTTP/2.0","method":"GET","host":"92j7.status.updown.io","u ...
show more
{"level":"info","ts":1792580822.4555185,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.168.22.16","remote_port":"42148","client_ip":"34.168.22.16","proto":"HTTP/2.0","method":"GET","host":"92j7.status.updown.io","uri":"/static../.env","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"],"Accept":["*/*"],"Cookie":["REDACTED"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"92j7.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000629222,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792580822.4569263,"logger":"http.log.
...
show less
DDoS Attack
Web App Attack
🇺🇸
mnsf
2026-10-21 11:05:44
UTC ·
(3 weeks ago)
Too many Status 40X (21)
Brute-Force
Web App Attack
2026-10-21 02:36:27
UTC ·
(3 weeks ago)
Attempted access to sensitive endpoint (/.htpasswd) detected. Automated scan or unauthorized probing.
Web App Attack
🇫🇷
dusfor72
2026-10-21 02:24:22
UTC ·
(3 weeks ago)
stupid access attempts on non-existant files
...
Web App Attack
🇪🇸
elcruzado.es
2026-10-21 02:12:49
UTC ·
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.168.22.16 (US/United States/16.22.168.34.bc.googleusercontent.com)
SQL Injection
🇹🇷
Jova
2026-10-20 22:55:01
UTC ·
(3 weeks ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
2026-10-20 21:41:04
UTC ·
(3 weeks ago)
apache vulnerability scan
Web App Attack
🇺🇸
jormaster3k
2026-10-20 20:58:59
UTC ·
(3 weeks ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
kkw
2026-10-20 20:36:07
UTC ·
(3 weeks ago)
[REDACTED] 34.168.22.16 - - [20/Oct/2026:22:36:06 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 301 405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
... (mode: searching http-sensiti ...
show more
[REDACTED] 34.168.22.16 - - [20/Oct/2026:22:36:06 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 301 405 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
2026-10-20 17:37:39
UTC ·
(3 weeks ago)
Aggressive web scan
Web App Attack
🇳🇱
Alt255
2026-10-20 17:27:03
UTC ·
(3 weeks ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - \[20/Oct/2026:19:26:59 +0200\] "GET /.htpasswd HTTP/1.1" 403 2088 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.168.22.16 - - \[20/Oct/2026:19:26:59 +0200\] "GET /.htpasswd HTTP/1.1" 403 2088 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
palzer.IT
2026-10-20 17:12:01
UTC ·
(3 weeks ago)
Report for plesk-apache-badbot: 34.168.22.16 - - [20/Oct/2026:19:11:58 +0200] GET /robots.txt [DOMAIN_REMOVED] 200 5926 [DOMAIN_REMOVED] Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +[DOMAIN_REMOVED]
Bad Web Bot
