🇩🇪
london2038.com
2026-11-06 05:55:21
UTC ·
(2 days ago)
Probing for exploits
34.178.187.93 - - [06/Nov/2026:06:55:18 +0100] "GET /api%2F.env HTTP/2.0" 422 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.178.187.93 - - [06/Nov/2026:0 ...
show more
Probing for exploits
34.178.187.93 - - [06/Nov/2026:06:55:18 +0100] "GET /api%2F.env HTTP/2.0" 422 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.178.187.93 - - [06/Nov/2026:06:55:18 +0100] "GET /settings%2F.env HTTP/2.0" 422 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
show less
Hacking
Web App Attack
🇩🇰
HostingGroup
2026-11-06 05:46:53
UTC ·
(2 days ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 2. First blocked: 2026-11-06.
Bad Web Bot
Web App Attack
2026-11-06 04:29:03
UTC ·
(2 days ago)
Bot / scanning and/or hacking attempts: GET / HTTP/2.0, [0/0] init, GET /robots.txt HTTP/2.0, GET /sitemap.xml HTTP/2.0, GET /gcp-credentials.json HTTP/2.0, GET //.env HTTP/2.0, GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 , GET /fi ...
show more
Bot / scanning and/or hacking attempts: GET / HTTP/2.0, [0/0] init, GET /robots.txt HTTP/2.0, GET /sitemap.xml HTTP/2.0, GET /gcp-credentials.json HTTP/2.0, GET //.env HTTP/2.0, GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 , GET /firebase-credentials.json HTTP/2.0, GET /wp-sitemap-posts-post-1.xml HTTP/2.0, [55/54] done: stream 107, GET /z9x8c7v6b5-debug-trigger-www.vvs, GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/2.0, GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP, GET /config/gcp-credentials.json HTTP/2.0, GET /.dockerenv HTTP/2.0, GET /google-service-account.json HTTP/2.0, GET /keys/service-account.json HTTP/2.0, GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/2., [4/4] read: stream 0, , GET /nieuws/ HTTP/2.0, GET /dist/.vite/manifest.json HTTP/2.0, GET /static../.env HTTP/2.0
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-11-06 03:48:15
UTC ·
(2 days ago)
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.178.187.93 - - [06/Nov/2026:04:47:38 +0100] "POST /v1/graphql HTTP/2.0" 404 66307 "https://consumer.rescued.nl" "Mozilla/5.0 (Linu ...
show more
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.178.187.93 - - [06/Nov/2026:04:47:38 +0100] "POST /v1/graphql HTTP/2.0" 404 66307 "https://consumer.rescued.nl" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.178.187.93 - - [06/Nov/2026:04:47:48 +0100] "GET /settings/integrations HTTP/2.0" 404 66307 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.178.187.93 - - [06/Nov/2026:04:47:48 +0100] "GET /settings/developer HTTP/2.0" 404 66307 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.178.187.93 - - [06/Nov/2026:04:47:48 +0100] "GET
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-06 03:09:50
UTC ·
(2 days ago)
7.144 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
2026-11-06 02:17:43
UTC ·
(2 days ago)
Aggressive Robot or Attack DDOS
DDoS Attack
🇨🇦
Mediashaker
2026-11-06 00:48:15
UTC ·
(2 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.178.187.93 (93.187.178.34.bc.googleusercontent.com)
Bad Web Bot
2026-11-06 00:05:36
UTC ·
(2 days ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-11-05 23:49:48
UTC ·
(2 days ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.178.187.93 - - [06/Nov/2026:00:49:25 +0100] "GET /img../.env HTTP/2.0" 404 43910 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.goog ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.178.187.93 - - [06/Nov/2026:00:49:25 +0100] "GET /img../.env HTTP/2.0" 404 43910 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Savvii
2026-11-05 23:37:49
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on light
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-05 23:05:15
UTC ·
(2 days ago)
csagent: score 22.9: 404 noise floor x14, spoofed crawler UA x1, secrets grab x1; 2 domain(s) in 6s
Web App Attack
🇩🇪
raph
2026-11-05 22:53:07
UTC ·
(2 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
2026-11-05 22:32:34
UTC ·
(2 days ago)
IP matched detection query many 3xx errors.
Brute-Force
🇺🇸
ipblock.com
2026-11-05 20:42:00
UTC ·
(2 days ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 20:37:51
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.178.187.93 (93.187.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:37:45.936162 2026] [security2:error] [pid 17869:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 34.178.187.93 (93.187.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 15:37:45.936162 2026] [security2:error] [pid 17869:tid 17869] [client 34.178.187.93:53420] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.creartest.com|F|2"] [data ".creartest.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.creartest.com"] [uri "/z9x8c7v6b5-debug-trigger-mail.creartest.com"] [unique_id "auzpGXarzgcwCQwQXCgR9AAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
