Anonymous
2026-11-03 12:17:27
UTC ·
(1 week ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇲🇽
octageeks.com
2026-11-03 05:31:11
UTC ·
(1 week ago)
Wordpress malicious attack:[octablocked]
Web App Attack
Anonymous
2026-11-02 14:15:59
UTC ·
(1 week ago)
34.47.35.105 - - [02/Nov/2026:14:15:59 +0000] "GET /admin/users HTTP/2.0" 404 1005 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "34.47.35.105" "-"
...
Web App Attack
🇳🇱
Alt255
2026-11-02 14:07:44
UTC ·
(1 week ago)
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.47.35.105 - - [02/Nov/2026:15:07:34 +0100] "GET /laravel../.env HTTP/2.0" 403 372 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.b ...
show more
[ti-03tr] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.47.35.105 - - [02/Nov/2026:15:07:34 +0100] "GET /laravel../.env HTTP/2.0" 403 372 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
EmilGH
2026-11-02 13:21:52
UTC ·
(1 week ago)
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /robots.txt HTTP/1.1" 404 537 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /sitemap ...
show more
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /robots.txt HTTP/1.1" 404 537 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /sitemap.xml HTTP/1.1" 404 537 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 537 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /z9x8c7v6b5-debug-trigger-unlimitedclass.com HTTP/1.1" 404 537 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "GET /mvwto39xaim49yzka2q0 HTTP/1.1" 404 4504 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.47.35.105 - - [02/Nov/2026:13:21:50 +0000] "
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-02 12:09:03
UTC ·
(1 week ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
infra-monitor
2026-11-02 12:00:07
UTC ·
(1 week ago)
Automated ban via infra-monitor: suspicious-probe, mgmt-path-probe, wp-sensitive-paths, +7 more
Port Scan
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-11-02 11:34:56
UTC ·
(1 week ago)
Detected by CrowdSec: crowdsecurity/http-sensitive-files
Web App Attack
🇵🇱
Budyn
2026-11-02 11:15:25
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: keycloak.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; W ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: keycloak.budyn.ovh | Path: /.vite/manifest.json | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 11:07:16
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.47.35.105 (105.35.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:07:12.328106 2026] [security2:error] [pid 749001:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.35.105 (105.35.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 06:07:12.328106 2026] [security2:error] [pid 749001:tid 749011] [client 34.47.35.105:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.uoexpanse.com"] [uri "/.env.dev.local"] [unique_id "auhu4DvgdsREwPF1nrNaRAAAAMM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
wpwoodo
2026-11-02 10:47:30
UTC ·
(1 week ago)
Webpage crawler
Bad Web Bot
🇦🇺
aranguren.org
2026-11-02 09:56:34
UTC ·
(1 week ago)
34.47.35.105 - - [02/Nov/2026:20:56:33 +1100] "GET /sitemap.xml HTTP/2.0" 404 995 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.47.35.105 - - [02/Nov/2026:20:56:33 +1100] "GET /sitemap_index.xml HTTP/2.0" 404 995 "-" "Mo ...
show more
34.47.35.105 - - [02/Nov/2026:20:56:33 +1100] "GET /sitemap.xml HTTP/2.0" 404 995 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.47.35.105 - - [02/Nov/2026:20:56:33 +1100] "GET /sitemap_index.xml HTTP/2.0" 404 995 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.47.35.105 - - [02/Nov/2026:20:56:33 +1100] "GET /z9x8c7v6b5-debug-trigger-nextcloud.aranguren.org HTTP/2.0" 404 995 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Anonymous
2026-11-02 09:55:24
UTC ·
(1 week ago)
IP matched detection query 404 icewarp.
Brute-Force
Hacking
🇧🇪
Saec
2026-11-02 09:54:00
UTC ·
(1 week ago)
Cloudflare WAF blocked 92 requests in 1h from CA. Top paths probed: /.env, /.git-credentials, /.gitlab-ci.yml. Pattern: bot/scanner abuse. Auto-reported by Jarvis CF monitor.
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-02 08:56:55
UTC ·
(1 week ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: shop.budyn.ovh | Path: /.env%3F.css | User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/) | ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: shop.budyn.ovh | Path: /.env%3F.css | User-Agent: CCBot/2.0 (https://commoncrawl.org/faq/) | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack