π³π±
Alt255
2026-10-14 19:49:37
(1 week ago)
[ti-17al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apac ...
show more
[ti-17al] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 34.19.196.117 - - [14/Oct/2026:21:49:34 +0200] "GET /z9x8c7v6b5-debug-trigger-staging.decomplexingzerotrust.com HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.19.196.117 - - [14/Oct/2026:21:49:34 +0200] "GET /pjexlqzox9ahvidqjq6p HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.19.196.117 - - [14/Oct/2026:21:49:34 +0200] "POST /graphql HTTP/2.0" 404 2004 "https://staging.decomplexingzerotrust.com" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.19.196.117 - - [14/Oct/2026:21:49:34 +0200] "POST /login HTTP/2.0" 404 2004 "-"
...
show less
Bad Web Bot
Web App Attack
π©πͺ
Live Home Cams
2026-10-14 15:54:58
(1 week ago)
WebApp brute force attack detected. Multiple file scanning attempts from 34.19.196.117. Detected by ...
show more
WebApp brute force attack detected. Multiple file scanning attempts from 34.19.196.117. Detected by fail2ban.
show less
Web App Attack
Brute-Force
πΊπΈ
TAY
2026-10-14 12:18:21
(1 week ago)
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /assets../.env HTTP/1.1" 404 363 "-" "Mozilla/5. ...
show more
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /assets../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /css../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /....//....//....//..../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /images../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /static../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.19.196.117 - - [14/Oct/2026:20:18:20 +0800] "GET /files../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Kimi
...
show less
Brute-Force
πΈπͺ
earnquest
2026-10-14 12:10:02
(1 week ago)
Vulnerability scanning detected on EarnQuest Server | Trigger path: /.git/head | Total attempts: 6 | ...
show more
Vulnerability scanning detected on EarnQuest Server | Trigger path: /.git/head | Total attempts: 6 | Sample paths: /secrets.yml, /.git/config, /secrets.json, /.git/head, /key.json | User-Agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) | Blocked by automated scanner detection middleware
show less
Web App Attack
Port Scan
πΊπΈ
mad-abuseip
2026-10-14 10:28:50
(1 week ago)
SCORE:99 REASON:suspicious-score:100 | "POST /api/templates/preview HTTP/1.1" SCORE:99 REASON:suspi ...
show more
SCORE:99 REASON:suspicious-score:100 | "POST /api/templates/preview HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +***@anthropic.com)"
show less
Web App Attack
π«π·
masterguru
2026-10-14 09:32:27
(1 week ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
Anonymous
2026-10-14 09:30:50
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-14 09:30:14
(1 week ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection