๐ณ๐ฑ
Alt255
2026-10-26 09:59:38
(2 hours ago)
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.40.43.102 - - [26/Oct/2026:10:59:30 +0100] "GET /@fs/app/.env.production?import&raw?? HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
etu brutus
2026-10-26 09:54:59
(2 hours ago)
34.40.43.102 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
Tamsy
2026-10-26 06:10:32
(6 hours ago)
HTTPD - 4xx scan
Web App Attack
๐บ๐ธ
rhandorf
2026-10-26 01:58:57
(10 hours ago)
Multiple web server 400 error codes from same source ip. (375 events) - reported by a home network S ...
show more
Multiple web server 400 error codes from same source ip. (375 events) - reported by a home network SIEM
show less
Port Scan
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-25 23:01:37
(13 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-24.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-25 18:35:50
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.40.43.102 (102.43.40.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.40.43.102 (102.43.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 25 14:35:46.603368 2026] [security2:error] [pid 11056:tid 11222] [client 34.40.43.102:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||raytbrown.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "raytbrown.com"] [uri "/z9x8c7v6b5-debug-trigger-raytbrown.com"] [unique_id "at5MAknjgy5APmkgRiSodAAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐น
Subnet Phantom Veil
2026-10-25 17:28:28
(19 hours ago)
[Activity Alert] Abusive automated scraping ignoring Robots.txt. IP automatically blocked and banned ...
show more
[Activity Alert] Abusive automated scraping ignoring Robots.txt. IP automatically blocked and banned. [User-Agent]: Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/). [OS]: Unknown. [IP Address]: 34.40.43.102. [IoA Datetime]: 2026-10-25 14:56:57 UTC.
show less
Bad Web Bot
Email Spam
Hacking
Phishing
Web Spam
Web App Attack
๐บ๐ธ
ChamberofCommerce.com
2026-10-25 14:10:25
(22 hours ago)
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested ...
show more
Unauthorized Scraping Attempt - More then 225 Pages Requested in a 24 hour period - Total Requested Before Block:229
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-25 13:49:18
(22 hours ago)
[ti-01ov] Web exploit scanning: 15 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-01ov] Web exploit scanning: 15 suspicious requests detected by fail2ban jail <name>. Example: 34.40.43.102 - - [23/Oct/2026:11:52:08 +0200] "GET /.env.config HTTP/1.1" 301 604 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.40.43.102 - - [23/Oct/2026:11:52:08 +0200] "GET /.env.development.local HTTP/1.1" 301 5952 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.40.43.102 - - [23/Oct/2026:11:52:08 +0200] "GET /.env.prod.local HTTP/1.1" 301 5938 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.40.43.102 - - [23/Oct/2026:11:52:08 +0200] "GET /.envrc HTTP/1.1" 301 594 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.40.43.102 - - [2
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-25 11:03:46
(1 day ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
wHosts
2026-10-25 10:42:36
(1 day ago)
Blocked by Fail2Ban
Web App Attack
๐ฉ๐ช
Sรฉfora Srl
2026-10-25 07:09:46
(1 day ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
๐ฌ๐ง
Marten Mark
2026-10-25 07:07:55
(1 day ago)
34.40.43.102 - - [25/Oct/2026:07:07:52 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 404 1448 "-" "Mozilla/5 ...
show more
34.40.43.102 - - [25/Oct/2026:07:07:52 +0000] "GET /.gitlab-ci.yml HTTP/2.0" 404 1448 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.40.43.102 - - [25/Oct/2026:07:07:53 +0000] "GET /.turbo/config.json HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.40.43.102 - - [25/Oct/2026:07:07:53 +0000] "GET /.turbo/config.json HTTP/2.0" 404 1453 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.40.43.102 - - [25/Oct/2026:07:07:53 +0000] "GET /.dev.vars HTTP/2.0" 404 1449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.40.43.102 - - [25/Oct/2026:07:07:53 +0000] "GET /.dev.vars HTTP/2.0" 404 1449 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML,
...
show less
Port Scan
Web App Attack
๐ง๐ช
taivas.nl
2026-10-25 05:37:04
(1 day ago)
Many_bad_calls
Web App Attack
Anonymous
2026-10-25 05:31:11
(1 day ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking