๐ซ๐ท
GabrielJST
2026-10-11 15:01:56
(6 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.40.23.40 (DE/Germ ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐จ๐ฆ
lakered
2026-10-11 14:01:55
(6 days ago)
Detectors: [SURICATA, NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost a ...
show more
Detectors: [SURICATA, NGINX] | Reasons: Nginx: Repeat offender returning to default/inactive vhost after previous ban | Suricata: Web Server attack | Evidence: Persistent-Slow-Scanner (Strikes: 5), High-Criminality-Signature (p0f:*:64:0:*:mss*46,10:mss,sok,ts,nop,ws:df,id+:0 - Ratio:0.81), OS-Signature-Mismatch (UA:Windows/p0f:Linux), Repeat-Offender (Past Bans: 4) | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | TCP Fingerprint: Modern Linux (Kernel 3.x+) (Link:generic tunnel or VPN, Uptime:0m)
show less
Web App Attack
Hacking
Port Scan
๐ช๐ธ
robotstxt
2026-10-11 13:31:26
(6 days ago)
34.40.23.40 - - [11/Oct/2026:13:30:35 +0000] "GET /z9x8c7v6b5-debug-trigger-devel.thestreetsapartmen ...
show more
34.40.23.40 - - [11/Oct/2026:13:30:35 +0000] "GET /z9x8c7v6b5-debug-trigger-devel.thestreetsapartments.com HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" "-" edge="34.40.23.40"
34.40.23.40 - - [11/Oct/2026:13:30:35 +0000] "GET /backoffice HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "-" edge="34.40.23.40"
34.40.23.40 - - [11/Oct/2026:13:30:35 +0000] "GET /nkgts93ic2su13ohoy9b HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-" edge="34.40.23.40"
34.40.23.40 - - [11/Oct/2026:13:30:35 +0000] "GET /reset-password HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0" "-" edge="34.40.23.40"
34.40.23.40 - - [11/Oct/2026:13:30:35
...
show less
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-11 10:52:56
(6 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-11 01:55:10
(6 days ago)
Aggressive web scan
Web App Attack
๐ณ๐ฑ
tmiland
2026-10-11 01:15:47
(1 week ago)
Detected 63 connections from 34.40.23.40 last 10 minutes.; lone high-rate source (combined 126 reque ...
show more
Detected 63 connections from 34.40.23.40 last 10 minutes.; lone high-rate source (combined 126 requests in both windows); Logs: 34.40.23.40 - - [11/Oct/2026:03:14:14 +0200] "GET / HTTP/1.1" 200 8291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.40.23.40 - - [11/Oct/2026:03:14:15 +0200] "GET /z9x8c7v6b5-debug-trigger-admin.tmiland.com HTTP/1.1" 200 8294 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" 34.40.23.40 - - [11/Oct/2026:03:14:15 +0200] "GET /42l7nppbs5i3yx8hjmso HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.40.23.40 - - [11/Oct/2026:03:14:15 +0200] "GET /unauthenticated/js/session-login.min.js?26502009999999999 HTTP/1.1" 200 3677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.40.23.40 - - [11/Oct/2026:03:14:16 +0200] "GET /service-worker.js HTTP/1.1"
show less
DDoS Attack
Bad Web Bot
Web App Attack
๐ณ๐ฑ
tmiland
2026-10-11 01:14:32
(1 week ago)
(nginx_444) Nginx 444 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleusercontent.com): 5 in the last 3 ...
show more
(nginx_444) Nginx 444 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.40.23.40; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.40.23.40 - - [11/Oct/2026:03:14:15 +0200] "GET /42l7nppbs5i3yx8hjmso HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.40.23.40 - - [11/Oct/2026:03:14:21 +0200] "GET /secrets.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.40.23.40 - - [11/Oct/2026:03:14:21 +0200] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 34.40.23.40 - - [11/Oct/2026:03:14:23 +0200] "GET /key.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" 34.40.23.40 - - [11/Oct/2026:03:14:23 +0200] "GET /credentials.json HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/
show less
Brute-Force
๐ณ๐ฑ
Savvii
2026-10-11 01:01:23
(1 week ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
andypiper
2026-10-11 01:00:55
(1 week ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-11 00:45:12
(1 week ago)
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.40.23.40 - - [11/Oct/2026:02:44:50 +0200] "GET /sign-in HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.40.23.40 - - [11/Oct/2026:02:44:50 +0200] "GET /panel HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.40.23.40 - - [11/Oct/2026:02:44:50 +0200] "GET /account HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.40.23.40 - - [11/Oct/2026:02:44:50 +0200] "GET /secure HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like G
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
clapper
2026-10-11 00:41:39
(1 week ago)
(mod_security) mod_security (id:980001) triggered by 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleus ...
show more
(mod_security) mod_security (id:980001) triggered by 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleusercontent.com): 5 in the last 3600 secs; ID: Clar
show less
Brute-Force
Bad Web Bot
Anonymous
2026-10-11 00:39:55
(1 week ago)
34.40.23.40 - - [11/Oct/2026:02:39:38 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0" 403 2 ...
show more
34.40.23.40 - - [11/Oct/2026:02:39:38 +0200] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
Anonymous
2026-10-11 00:30:26
(1 week ago)
Bot traffic targeting WordPress resources
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-11 00:20:01
(1 week ago)
crowdsecurity/grafana-cve-2021-43798
Brute-Force
Web App Attack
๐ฌ๐ง
Apache
2026-10-11 00:15:33
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleus ...
show more
(mod_security) mod_security (id:210730) triggered by 34.40.23.40 (DE/Germany/40.23.40.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
SSH
Web App Attack