🇳🇱
Alboweb B.V.
2026-11-15 15:11:05
UTC ·
(14 minutes ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇳🇱
Savvii
2026-11-15 14:59:04
UTC ·
(26 minutes ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CDO
2026-11-15 14:28:39
UTC ·
(57 minutes ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-11-15 12:50:04
UTC ·
(2 hours ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
Anonymous
2026-11-15 12:46:59
UTC ·
(2 hours ago)
34.22.155.148 - - [15/Nov/2026:06:46:57 -0600] "GET /.env HTTP/1.1" 403 199 "https://stjohnneumannschool.com/.//.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 104.23.227.6
34.2 ...
show more
34.22.155.148 - - [15/Nov/2026:06:46:57 -0600] "GET /.env HTTP/1.1" 403 199 "https://stjohnneumannschool.com/.//.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 104.23.227.6
34.22.155.148 - - [15/Nov/2026:06:46:57 -0600] "GET /.env HTTP/1.1" 403 199 "https://stjohnneumannschool.com//.env" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 104.23.227.7
34.22.155.148 - - [15/Nov/2026:06:46:58 -0600] "GET /.env.secret HTTP/1.1" 403 199 "https://stjohnneumannschool.com/.env.secret" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 104.23.227.7
34.22.155.148 - - [15/Nov/2026:06:46:58 -0600] "GET /.env.keys HTTP/1.1" 403 199 "https://stjohnneumannschool.com/.env.keys" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 104.23.227.7
34.22.155.148 - - [15/Nov/2026:06:46:58 -0600] "GET /.env.production.local HTTP/1.1" 4
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-15 11:59:31
UTC ·
(3 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-15 11:17:59
UTC ·
(4 hours ago)
[ti-17al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.155.148 - - [15/Nov/2026:12:17:57 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 301 519 "-" "Mozilla/5.0 (compatible; Baiduspid ...
show more
[ti-17al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.155.148 - - [15/Nov/2026:12:17:57 +0100] "GET /static/../../../a/../../../../.env HTTP/2.0" 301 519 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.22.155.148 - - [15/Nov/2026:12:17:57 +0100] "GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env HTTP/2.0" 301 601 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.22.155.148 - - [15/Nov/2026:12:17:57 +0100] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 301 663 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.22.155.148 - - [15/Nov/2026:12:17:57 +0
...
show less
Bad Web Bot
Web App Attack
🇺🇸
kbeezie
2026-11-15 11:10:36
UTC ·
(4 hours ago)
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /turbo.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /lerna.json HTTP/1.1" 429 162 "-" "Mozilla/ ...
show more
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /turbo.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /lerna.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /vercel.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /railway.toml HTTP/1.1" 429 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.22.155.148 - - [15/Nov/2026:06:10:35 -0500] "GET /railway.json HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-15 11:08:09
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.22.155.148 (148.155.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:08:03.718487 2026] [security2:error] [pid 6741:tid 6 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.22.155.148 (148.155.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 15 06:08:03.718487 2026] [security2:error] [pid 6741:tid 6741] [client 34.22.155.148:52466] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.stgeorgellc.com|F|2"] [data ".stgeorgellc.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.stgeorgellc.com"] [uri "/z9x8c7v6b5-debug-trigger-www.stgeorgellc.com"] [unique_id "avmSk45zQ7EntxgmQOmzZAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
JCB
2026-06-25 16:20:00
UTC ·
(4 months ago)
34.22.155.148 - - [25/Jun/2026:14:45:07 +0300] "GET /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings HTTP/1.1" 404 236
34.22.155.148 - - [25/Jun/2026:14:45:07 +0300] "GET /wp-json/gravitysmtp/v1/settings HTTP/1.1" 404 236
...
Web App Attack
Hacking
🇺🇸
Starburst SysOp Team
2026-06-25 14:48:47
UTC ·
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-14)
Hacking
Bad Web Bot