🇱🇻
radix
2026-11-07 00:20:38
UTC ·
(17 hours ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack
🇮🇹
mgarofano80
2026-11-06 21:43:54
UTC ·
(19 hours ago)
Brute-Force
Web App Attack
🇳🇴
ScamAware
2026-11-06 19:41:14
UTC ·
(21 hours ago)
Fail2Ban: scanning web server by bare IP address
Port Scan
Bad Web Bot
🇳🇱
Alt255
2026-11-06 18:11:50
UTC ·
(23 hours ago)
[livebd] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 34.23.184.125 - - [06/Nov/2026:19:11:33 +0100] "GET /sitemap.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https: ...
show more
[livebd] Excessive 404 errors (web scanning): 26 suspicious requests detected by fail2ban jail apache-404. Example: 34.23.184.125 - - [06/Nov/2026:19:11:33 +0100] "GET /sitemap.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.23.184.125 - - [06/Nov/2026:19:11:33 +0100] "GET /sitemap_index.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.23.184.125 - - [06/Nov/2026:19:11:34 +0100] "GET /onboarding HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
34.23.184.125 - - [06/Nov/2026:19:11:34 +0100] "GET /settings/team HTTP/1.1" 404 7901 "-" "Mozilla/5.0 (Linux; Android 10; K
...
show less
Bad Web Bot
Web App Attack
🇺🇸
chronos
2026-11-06 17:49:23
UTC ·
(23 hours ago)
[AUTORAVALT][[06/11/2026 - 14:49:22 -03:00 UTC]
Attack from [Google LLC]
[34.23.184.125][125.184.23.34.bc.googleusercontent.com]
Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.t ...
show more
[AUTORAVALT][[06/11/2026 - 14:49:22 -03:00 UTC]
Attack from [Google LLC]
[34.23.184.125][125.184.23.34.bc.googleusercontent.com]
Action: BLocKed
Bad Web Bot -> Webpage scraping (email extraction, content, etc.) crawlers that do not respect robots.txt. Excessive requests and user agent spoofing.
]
...
show less
Bad Web Bot
🇫🇷
Delta-shop
2026-11-06 17:48:23
UTC ·
(23 hours ago)
PrestaShop Security Module: AbuseIPDB high confidence score AND local web-app-attack detected (AbuseIPDB score: 100% (cached))
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:37:17
UTC ·
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:37:14.064570 2026] [security2:error] [pid 26141:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:37:14.064570 2026] [security2:error] [pid 26141:tid 26141] [client 34.23.184.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.webfrog.ws"] [uri "/packages/database/.env"] [unique_id "au4QSrIBk856g7SqhW6hXAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-06 17:34:26
UTC ·
(23 hours ago)
Aggressive web scan
Web App Attack
🇺🇸
Mundo Bueno
2026-11-06 17:25:06
UTC ·
(23 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-06 17:23:02
UTC ·
(23 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 17:16:26
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:16:09
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:16:06.928212 2026] [security2:error] [pid 23414:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:16:06.928212 2026] [security2:error] [pid 23414:tid 23414] [client 34.23.184.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.rodrigoaldecoa.com"] [uri "/.env.dev"] [unique_id "au4LVi22l73r3zQcHZ1hgQAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
rh24
2026-11-06 17:04:37
UTC ·
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.23.184.125 (US/United States/125.184.23.34.bc.googleusercontent.com)
Bad Web Bot
🇧🇷
radardatelecom
2026-11-06 16:54:02
UTC ·
(1 day ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 16:24:43
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:24:37.078329 2026] [security2:error] [pid 8067:tid 8 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.23.184.125 (125.184.23.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 11:24:37.078329 2026] [security2:error] [pid 8067:tid 8067] [client 34.23.184.125:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.caspina.com"] [uri "/packages/config/.env"] [unique_id "au3_RZerxGEP8ihxH-yoxQAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
