๐ณ๐ฑ
Alt255
2026-10-27 04:28:55
(3 hours ago)
[ti-01ov] Web exploit scanning: 27 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-01ov] Web exploit scanning: 27 suspicious requests detected by fail2ban jail <name>. Example: 34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /build/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /.git/config HTTP/1.1" 301 563 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Perplexity-User/1.0\; +https://perplexity.ai/perplexity-user\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /.git/HEAD HTTP/1.1" 301 563 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /dist/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 \(compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/\)"
chatun.nl:
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 13:49:29
(1 day ago)
[ti-01ov] Web exploit scanning: 27 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-01ov] Web exploit scanning: 27 suspicious requests detected by fail2ban jail <name>. Example: 34.57.109.38 - - [21/Oct/2026:08:26:46 +0200] "GET /build/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.57.109.38 - - [21/Oct/2026:08:26:46 +0200] "GET /.git/config HTTP/1.1" 301 563 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.57.109.38 - - [21/Oct/2026:08:26:46 +0200] "GET /.git/HEAD HTTP/1.1" 301 563 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.57.109.38 - - [21/Oct/2026:08:26:46 +0200] "GET /dist/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
chatun.nl:
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-10-21 17:05:17
(5 days ago)
Too many Status 40X (16)
Scanning/Probing (17)
Request Overload (103)
Brute-Force
Web App Attack
๐ง๐ท
ICS Labs
2026-10-21 14:40:38
(5 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-21 UTC.
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-10-21 11:50:07
(5 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-21 11:21:36
(5 days ago)
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /values.yaml HTTP/2.0" 404 294 "-" "Mozilla/5.0 A ...
show more
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /values.yaml HTTP/2.0" 404 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /services/.env HTTP/2.0" 404 294 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /apps/.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /packages/.env HTTP/2.0" 404 294 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /api/v1/.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.57.109.38 - - [21/Oct/2026:13:21:34 +0200] "GET /scripts/.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://develo
show less
Web App Attack
Hacking
๐ฌ๐ง
consul.to
2026-10-21 11:20:03
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-21 11:05:02
(5 days ago)
suspicious request in access.log
Web App Attack
๐ฉ๐ช
konseptit
2026-10-21 10:51:11
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.57.109.38 (US/United States/38.109.5 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.57.109.38 (US/United States/38.109.57.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฌ๐ง
Comberton
2026-10-21 10:51:08
(5 days ago)
Ban via F2B wordfence
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-21 10:42:23
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-21 10:39:27
(5 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
xmission.com
2026-10-21 10:15:03
(5 days ago)
Blocked by UFW (TCP on 8080)
Source port: 52838
TTL: 60
Packet length: 60
TOS: 0x00
This report (fo ...
show more
Blocked by UFW (TCP on 8080)
Source port: 52838
TTL: 60
Packet length: 60
TOS: 0x00
This report (for 34.57.109.38) was generated by:
https://github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Web App Attack
๐ณ๐ฟ
Tripwire
2026-10-21 06:32:22
(6 days ago)
Fake Microsoft bot "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +htt ...
show more
Fake Microsoft bot "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-21 06:26:59
(6 days ago)
[ti-01ov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /build/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /.git/config HTTP/1.1" 301 563 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Perplexity-User/1.0\; +https://perplexity.ai/perplexity-user\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /.git/HEAD HTTP/1.1" 301 563 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
34.57.109.38 - - \[21/Oct/2026:08:26:46 +0200\] "GET /dist/.env HTTP/1.1" 301 563 "-" "Mozilla/5.0 \(compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/\)"
chatun.nl:
...
show less
Bad Web Bot
Web App Attack