🇳🇱
Alt255
2026-11-04 12:51:42
UTC ·
(1 week ago)
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.77.119.148 - - [04/Nov/2026:13:51:35 +0100] "GET /dev/.env HTTP/2.0" 403 395 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/se ...
show more
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.77.119.148 - - [04/Nov/2026:13:51:35 +0100] "GET /dev/.env HTTP/2.0" 403 395 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 12:27:12
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.77.119.148 (148.119.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:27:04.767871 2026] [security2:error] [pid 14357:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.119.148 (148.119.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:27:04.767871 2026] [security2:error] [pid 14357:tid 14357] [client 34.77.119.148:34910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.aquatreat.net"] [uri "/staging/.env"] [unique_id "auskmP3EJts1Yn9IshTT2wAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-04 12:11:56
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.77.119.148 (148.119.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:11:52.303184 2026] [security2:error] [pid 23759:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.77.119.148 (148.119.77.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 07:11:52.303184 2026] [security2:error] [pid 23759:tid 23759] [client 34.77.119.148:46616] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.antimu.com"] [uri "/.env.testing"] [unique_id "aushCAh6RNkYPDnNKXzXqwAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-04 12:02:12
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-11-04 10:39:12
UTC ·
(1 week ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
2026-11-04 10:33:46
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.77.119.148 (BE/Belgium/148.119.77.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
dbmwebdesign
2026-11-04 10:05:04
UTC ·
(1 week ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
2026-11-04 09:54:58
UTC ·
(1 week ago)
Aggressive web scan
Web App Attack
🇩🇪
bazter.pro
2026-11-04 09:24:24
UTC ·
(1 week ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇪🇸
elcruzado.es
2026-11-04 09:20:29
UTC ·
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.77.119.148 (BE/Belgium/148.119.77.34.bc.googleusercontent.com)
SQL Injection
🇲🇾
Rizzy
2026-11-04 09:05:21
UTC ·
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇨🇭
Origon
2026-11-04 08:51:32
UTC ·
(1 week ago)
http-probing - IP: 34.77.119.148 - time="2026-11-04T09:51:31+01:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.77.119.148 (BE/396982) : 4h ban on Ip 34.77.119.148" module=db
Web App Attack
🇺🇸
VanKoh
2026-11-04 08:48:35
UTC ·
(1 week ago)
(cpanel) Failed cPanel login from 34.77.119.148 (BE/Belgium/Brussels Capital/Brussels/148.119.77.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.77.119.148; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2026-11-04 02:48:26 -0600] ...
show more
(cpanel) Failed cPanel login from 34.77.119.148 (BE/Belgium/Brussels Capital/Brussels/148.119.77.34.bc.googleusercontent.com): 5 in the last 3600 secs; IP: 34.77.119.148; Ports: *; Direction: 1; Trigger: LF_TRIGGER; Logs: [2026-11-04 02:48:26 -0600] info [webmaild] 34.77.119.148 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-11-04 02:48:28 -0600] info [webmaild] 34.77.119.148 - - "GET /z9x8c7v6b5-debug-trigger-webmail.aeropuertochichenitza.mx HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-11-04 02:48:29 -0600] info [webmaild] 34.77.119.148 - - "GET /.env.testing HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-11-04 02:48:29 -0600] info [webmaild] 34.77.119.148 - - "GET /.env.credentials HTTP/1.1" FAILED LOGIN webmaild: login attempt without username [2026-11-04 02:48:29 -0600] info [webmaild] 34.77.119.148 - - "POST /api/graphql HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
show less
Brute-Force
🇳🇱
Alt255
2026-11-04 08:40:50
UTC ·
(1 week ago)
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 34.77.119.148 - - \[04/Nov/2026:09:40:29 +0100\] "GET /z9x8c7v6b5-debug-trigger-legacy.agro-ecolum.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 ...
show more
[ti-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 34.77.119.148 - - \[04/Nov/2026:09:40:29 +0100\] "GET /z9x8c7v6b5-debug-trigger-legacy.agro-ecolum.nl HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
34.77.119.148 - - \[04/Nov/2026:09:40:29 +0100\] "GET /r5fik9ldpyihb05mg39k HTTP/1.1" 404 2105 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
34.77.119.148 - - \[04/Nov/2026:09:40:30 +0100\] "POST /graphql HTTP/1.1" 404 3632 "https://legacy.agro-ecolum.nl" "Mozilla/5.0 \(Linux\; Android 10\; K\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.77.119.
...
show less
Bad Web Bot
Web App Attack
🇺🇸
oralunal
2026-11-04 08:27:49
UTC ·
(1 week ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
