๐ณ๐ฑ
Site.eu
2026-10-19 09:33:46
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
masterguru
2026-10-19 09:30:07
(3 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "ccbot" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
๐ฉ๐ช
Jochen Pretli
2026-10-19 08:42:49
(3 days ago)
connection to honeypot
Email Spam
Port Scan
๐ฉ๐ช
BlueWire Hosting
2026-10-19 08:24:03
(3 days ago)
Modsecurity: probe or injection attempt
SQL Injection
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 07:27:58
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 34.7.220.134 (134.220.7.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.7.220.134 (134.220.7.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 03:27:50.614146 2026] [security2:error] [pid 29845:tid 29845] [client 34.7.220.134:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||mail.assistguide.net|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "mail.assistguide.net"] [uri "/server.key"] [unique_id "atXGdlpA1NVPWvz59AAXvQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 07:26:02
(3 days ago)
[cb-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.7.220.134 - - [19/Oct/2026:09:25:42 +0200] "GET /.env.development?raw HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-19 07:17:26
(3 days ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-19 06:56:46
(3 days ago)
[cb-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.7.220.134 - - [19/Oct/2026:08:56:26 +0200] "GET /static/manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.7.220.134 - - [19/Oct/2026:08:56:26 +0200] "GET /assets/manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.7.220.134 - - [19/Oct/2026:08:56:26 +0200] "GET /pfz30wrqy2j0hl0jmm5z HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.7.220.134 - - [19/Oct/2026:08:56:26 +0200] "GET /manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.7.220.134 - - [19/Oct/
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Operator873
2026-10-19 06:37:52
(3 days ago)
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, serve ...
show more
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "mailadmin.ntars.net"
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, server: [OBFUSCATED], request: "GET / HTTP/1.1", host: "mailadmin.ntars.net"
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, server: [OBFUSCATED], request: "GET /robots.txt HTTP/1.1", host: "mailadmin.ntars.net"
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, server: [OBFUSCATED], request: "GET /robots.txt HTTP/1.1", host: "mailadmin.ntars.net"
2026/10/19 01:37:50 [error] 394202#0: *1919968 access forbidden by rule, client: 34.7.220.134, server: [OBFUSCATED], request: "GET /sign-in HTTP/1.1", host: "mailadmin.ntars.net"
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
abenage
2026-10-19 06:16:04
(3 days ago)
34.7.220.134 - - [19/Oct/2026:00:16:03 -0600] "GET /console HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Wind ...
show more
34.7.220.134 - - [19/Oct/2026:00:16:03 -0600] "GET /console HTTP/2.0" 404 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-10-19 04:36:45
(3 days ago)
34.7.220.134 - - [19/Oct/2026:06:36:44 +0200] "GET /signin HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Macin ...
show more
34.7.220.134 - - [19/Oct/2026:06:36:44 +0200] "GET /signin HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.7.220.134 - - [19/Oct/2026:06:36:44 +0200] "GET /dashboard HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.7.220.134 - - [19/Oct/2026:06:36:44 +0200] "GET /awzdsf8m1tjmaq9nrspr HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
show less
Brute-Force
๐ณ๐ฑ
Savvii
2026-10-19 04:36:00
(3 days ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฌ
mypatricks
2026-10-19 04:07:56
(3 days ago)
34.7.220.134 | Port: 12580 | DNS: 134.220.7.34.bc.googleusercontent.com 2026-10-19T12:07:55+08:00 Eu ...
show more
34.7.220.134 | Port: 12580 | DNS: 134.220.7.34.bc.googleusercontent.com 2026-10-19T12:07:55+08:00 Europe/Amsterdam | Abuse bots or crawlers | UA: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) HTTP/1.1 443 GET | URL: /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ/?raw?? | Ref: https://xxxxxx/@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? | Country: NL/Netherlands the/+01:00 IP City: Groningen a4cceb2a0c019fed-AMS/Amsterdam, Netherlands 2 hits/2 secs Robots 2
show less
Brute-Force
Web App Attack
Blog Spam
Web Spam
Exploited Host
๐ณ๐ฑ
Savvii
2026-10-19 03:38:29
(3 days ago)
20 attempts against mh-misbehave-ban on pea
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-19 03:37:28
(3 days ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack