🇳🇱
thedreamer.nl
2026-10-25 21:29:50
(13 hours ago)
34.85.104.231 - - [25/Oct/2026:22:26:57 +0100] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (W ...
show more
34.85.104.231 - - [25/Oct/2026:22:26:57 +0100] "GET /.git/config HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990"
34.85.104.231 - - [25/Oct/2026:22:26:58 +0100] "GET /.env HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990"
34.85.104.231 - - [25/Oct/2026:22:26:59 +0100] "GET /.env.local HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990"
34.85.104.231 - - [25/Oct/2026:22:27:00 +0100] "GET /.env.production HTTP/1.1" 499 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "JP" "Tokyo" "35.68930" "139.68990"
34.85.104.231 - - [25/Oct/2026:22:27:01 +0100] "GET /.env.stagin
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2026-10-25 19:40:51
(14 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-25 13:44:43
(20 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.85.104.231 - - [22/Oct/2026:18:29:39 +0200] "GET /.git/config HTTP/1.1" 404 90384 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇹
SchiWaGoA
2026-10-25 11:26:58
(23 hours ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
🇦🇺
2000cn.com.au
2026-10-25 10:41:33
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-25 10:19:49
(1 day ago)
34.85.104.231 - - [25/Oct/2026:04:19:48 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 ...
show more
34.85.104.231 - - [25/Oct/2026:04:19:48 -0600] "GET /.git/config HTTP/1.1" 300 4478 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇩🇪
EGP Abuse Dept
2026-10-25 09:39:59
(1 day ago)
Scanning for web/db/file exploits on support.next.mach3shop.nl
SQL Injection
Bad Web Bot
Web App Attack
2026-10-25 07:16:23
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇦🇺
Starburst SysOp Team
2026-10-25 04:00:13
(1 day ago)
Malware host detected by rbl.malware.expert. RBL lookup of 231.104.85.34.rbl.malware.expert succeede ...
show more
Malware host detected by rbl.malware.expert. RBL lookup of 231.104.85.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-syd2-4)
show less
Hacking
🇳🇱
e.fierstra
2026-10-25 03:23:07
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇫🇷
mail.avx.gr
2026-10-25 00:45:42
(1 day ago)
(nginxENVSCAN) nginx environment-file scanner detected from 34.85.104.231 (JP/Japan/Tokyo/Shibuya Ci ...
show more
(nginxENVSCAN) nginx environment-file scanner detected from 34.85.104.231 (JP/Japan/Tokyo/Shibuya City/231.104.85.34.bc.googleusercontent.com)
show less
Hacking
2026-10-24 22:25:06
(1 day ago)
SSH brute force detected by CrowdSec
Brute-Force
🇳🇱
Site.eu
2026-10-24 22:00:20
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇩🇰
swrlly
2026-10-24 21:46:15
(1 day ago)
1 unauthorized webserver connection
Web App Attack
🇩🇪
Hary74656
2026-10-24 02:43:14
(2 days ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
TX:block ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/"] [unique_id "atwbQfYhqW1iEXVnAD6FFgAAAEA"]
[Sat Oct 24 04:43:13.740999 2026] [vhost aschi.at] [security2:error] [pid 360214:tid 139658243602112] [client 34.85.104.231:49490] [realclient 34.85.104.231:49490] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 15)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/"] [unique_id "atwbQfYhqW1iEXVnAD6FFwAAAFE"]
show less
Web App Attack
