🇨🇭
TheCoon
2026-11-08 11:10:16
UTC ·
(4 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇱🇻
GooddayGroup
2026-11-07 00:19:09
UTC ·
(6 days ago)
Malicious automated scanning and unauthorized access attempts.
Brute-Force
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-06 20:25:56
UTC ·
(6 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇳🇱
Alt255
2026-11-06 20:04:35
UTC ·
(6 days ago)
[cb-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.84.155.100 - - [06/Nov/2026:21:04:26 +0100] "GET /assets/manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; ...
show more
[cb-14al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.84.155.100 - - [06/Nov/2026:21:04:26 +0100] "GET /assets/manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.155.100 - - [06/Nov/2026:21:04:26 +0100] "GET /z9x8c7v6b5-debug-trigger-mail.cb-14.alt255.net HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.84.155.100 - - [06/Nov/2026:21:04:26 +0100] "GET /manifest.json HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.155.100 - - [06/Nov/2026:21:04:26 +0100] "GET /8f08fpl4oi4wnwrgdejz HTTP/2.0" 404 1422 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.8
...
show less
Bad Web Bot
Web App Attack
🇨🇦
webemsegundos
2026-11-06 19:26:47
UTC ·
(6 days ago)
Web vulnerability scanner: 176 probe paths (e.g. /console, /packages/api/.env, /.env.shared, /.env.monorepo, /.env.common, /prisma/.env). Blocked by WeS Firewall.
Bad Web Bot
Web App Attack
🇫🇷
Catalin Negru
2026-11-06 19:23:18
UTC ·
(6 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇩🇪
FeG Deutschland
2026-11-06 19:14:05
UTC ·
(6 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇬🇧
Marten Mark
2026-11-06 18:58:42
UTC ·
(6 days ago)
34.84.155.100 - - [06/Nov/2026:18:58:41 +0000] "GET /.aws/credentials%3F.txt HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Goog ...
show more
34.84.155.100 - - [06/Nov/2026:18:58:41 +0000] "GET /.aws/credentials%3F.txt HTTP/2.0" 301 0 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Bad Web Bot
Anonymous
2026-11-06 17:17:28
UTC ·
(6 days ago)
Flagged as abuse by IisGuard automated detection (tier L5, score 90/100). Reasons: Reputation=1, BadPath=24,9, CanaryOverride=90.
Web App Attack
🇩🇪
LRob
2026-11-06 17:15:26
UTC ·
(6 days ago)
Vulnerability scanning | method: GET, POST | path: /sitemap.xml, /sitemap_index.xml, /assets/manifest.json (+17 more) | ua: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://dev ...
show more
Vulnerability scanning | method: GET, POST | path: /sitemap.xml, /sitemap_index.xml, /assets/manifest.json (+17 more) | ua: Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler), Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0 (+8 more) | src_port: 59070
show less
Port Scan
Web App Attack
🇧🇷
radardatelecom
2026-11-06 16:54:03
UTC ·
(6 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 16:44:02
UTC ·
(6 days ago)
[ti-12al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 34.84.155.100 - - \[06/Nov/2026:17:43:44 +0100\] "GET /.docker/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Meta-WebIndexer/1.0\; +https://dev ...
show more
[ti-12al] Web exploit scanning: 5 suspicious requests detected by fail2ban jail <name>. Example: 34.84.155.100 - - \[06/Nov/2026:17:43:44 +0100\] "GET /.docker/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Meta-WebIndexer/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
34.84.155.100 - - \[06/Nov/2026:17:43:44 +0100\] "GET /site/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Hunyuan/1.0\; +https://hunyuan.tencent.com/\)"
34.84.155.100 - - \[06/Nov/2026:17:43:44 +0100\] "GET /api/.env.bak HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; MoonshotBot/1.0\; +https://kimi.ai/\)"
34.84.155.100 - - \[06/Nov/2026:17:43:44 +0100\] "GET /old/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; Claude-SearchBot/1.0\; +
...
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-11-06 16:41:20
UTC ·
(6 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "OAI-SearchBot" at REQUEST_HEADERS:user-agent. (1100000-131)
Bad Web Bot
Anonymous
2026-11-06 16:37:03
UTC ·
(6 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.84.155.100 (JP/Japan/100.155.84.34.bc.googleusercontent.com)
SQL Injection
🇬🇧
consul.to
2026-11-06 16:04:20
UTC ·
(6 days ago)
Web attack/malicious scanning detected
Web App Attack