🇳🇱
Cloud86 B.V.
2026-10-25 17:00:09
UTC ·
(2 weeks ago)
categories: Email Spam
Email Spam
Anonymous
2026-10-01 15:00:10
UTC ·
(1 month ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
🇳🇱
Site.eu
2026-10-01 14:53:01
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
melroy89
2026-10-01 14:48:22
UTC ·
(1 month ago)
2026/10/01 16:48:20 [error] 2607439#2607439: *2113274 limiting requests, excess: 5.276 by zone "ip", client: "34.87.43.14", server: "_", request_line: "GET /credentials.js HTTP/1.1", host: "pay.melroy.org"
2026/10/01 16:48:21 [error] 2607439#2607439: ...
show more
2026/10/01 16:48:20 [error] 2607439#2607439: *2113274 limiting requests, excess: 5.276 by zone "ip", client: "34.87.43.14", server: "_", request_line: "GET /credentials.js HTTP/1.1", host: "pay.melroy.org"
2026/10/01 16:48:21 [error] 2607439#2607439: *2113274 limiting requests, excess: 5.682 by zone "ip", client: "34.87.43.14", server: "_", request_line: "GET /.env.js HTTP/1.1", host: "pay.melroy.org"
2026/10/01 16:48:21 [error] 2607439#2607439: *2113267 limiting requests, excess: 5.463 by zone "ip", client: "34.87.43.14", server: "_", request_line: "GET /public/env.js HTTP/1.1", host: "pay.melroy.org"
...
show less
Web App Attack
Anonymous
2026-10-01 14:36:56
UTC ·
(1 month ago)
[Thu Oct 01 15:57:15.332778 2026] [php:error] [pid 3605191] [client 34.87.43.14:48816] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
[Thu Oct 01 15:57:31.783416 2026] [php:error] [pid 3652865] [client 34.87. ...
show more
[Thu Oct 01 15:57:15.332778 2026] [php:error] [pid 3605191] [client 34.87.43.14:48816] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
[Thu Oct 01 15:57:31.783416 2026] [php:error] [pid 3652865] [client 34.87.43.14:40644] script '/var/www/11spielerinnen.de/public_html/index.php' not found or unable to stat
[Thu Oct 01 15:57:32.683244 2026] [php:error] [pid 3652865] [client 34.87.43.14:40644] script '/var/www/11spielerinnen.de/public_html/index.php' not found or unable to stat
[Thu Oct 01 16:36:46.764634 2026] [php:error] [pid 3697802] [client 34.87.43.14:57104] script '/var/www/11spielerinnen.de/public_html/document.php' not found or unable to stat
[Thu Oct 01 16:36:55.364703 2026] [php:error] [pid 3668848] [client 34.87.43.14:57238] script '/var/www/11spielerinnen.de/public_html/index.php' not found or unable to stat
...
show less
Bad Web Bot
🇩🇪
Marc
2026-10-01 14:21:58
UTC ·
(1 month ago)
34.87.43.14 - - [01/Oct/2026:16:21:58 +0200] "GET /account/login HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.87.43.14 - - [01/Oct/2026:16:21:58 +0200] "GET ...
show more
34.87.43.14 - - [01/Oct/2026:16:21:58 +0200] "GET /account/login HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.87.43.14 - - [01/Oct/2026:16:21:58 +0200] "GET /auth/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 34.87.43.14 - - [01/Oct/2026:16:21:58 +0200] "GET /model/info HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
Brute-Force
🇺🇸
dot.mg
2026-10-01 14:07:04
UTC ·
(1 month ago)
Bad behaviour
Web Spam
🇺🇸
JonathanYoung2161
2026-10-01 13:41:09
UTC ·
(1 month ago)
trekgalactic.org 34.87.43.14 - - [01/Oct/2026:08:41:07 -0500] "GET /config/env/aws_credentials.env HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
trekgalactic.org 34.87.43.14 - - [01/Oct/2026:08:41:07 -0500] "GET ...
show more
trekgalactic.org 34.87.43.14 - - [01/Oct/2026:08:41:07 -0500] "GET /config/env/aws_credentials.env HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
trekgalactic.org 34.87.43.14 - - [01/Oct/2026:08:41:07 -0500] "GET /.npmrc HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
trekgalactic.org 34.87.43.14 - - [01/Oct/2026:08:41:08 -0500] "GET /.ssh/id_rsa HTTP/2.0" 404 3360 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Brute-Force
Web App Attack
🇩🇪
TheDjRider
2026-10-01 13:40:46
UTC ·
(1 month ago)
CrowdSec detected Web application reconnaissance. Scenario: local/framework-recon. Automatic ban triggered. Detection time (UTC): 2026-10-01T13:40:45.213311403Z. Context: http_status=200
Web App Attack
🇺🇸
wteiken
2026-10-01 13:40:40
UTC ·
(1 month ago)
2026-10-01T09:40:40.221031-04:00 rocinante.teiken.net kernel: [2754643.512417] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.87.43.14 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=12188 DF PROTO=TCP SPT=34670 DP ...
show more
2026-10-01T09:40:40.221031-04:00 rocinante.teiken.net kernel: [2754643.512417] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.87.43.14 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=12188 DF PROTO=TCP SPT=34670 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-10-01T09:40:40.328383-04:00 rocinante.teiken.net kernel: [2754643.619757] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.87.43.14 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=50246 DF PROTO=TCP SPT=34674 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-10-01T09:40:40.357621-04:00 rocinante.teiken.net kernel: [2754643.649025] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:ae:05:2f:b7:08:00 SRC=34.87.43.14 DST=192.168.16.119 LEN=60 TOS=0x00 PREC=0x00 TTL=57 ID=54795 DF PROTO=TCP SPT=34692 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-10-01T09:40:40.357752-04:00 rocinante.teiken.net kernel: [2754643.649211] syn_limit:IN=ens5 OUT= MAC=0a:ff:cf:a1:a5:bb:0a:f3:
...
show less
Port Scan
🇩🇪
updown.io
2026-10-01 13:29:50
UTC ·
(1 month ago)
{"level":"info","ts":1790861384.0811398,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.87.43.14","remote_port":"33428","client_ip":"34.87.43.14","proto":"HTTP/2.0","method":"GET","host":"status.brandlight.org","uri ...
show more
{"level":"info","ts":1790861384.0811398,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.87.43.14","remote_port":"33428","client_ip":"34.87.43.14","proto":"HTTP/2.0","method":"GET","host":"status.brandlight.org","uri":"/static/manifest.json","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-User":["?1"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Microsoft Edge\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Platform":["\"An
...
show less
DDoS Attack
Web App Attack
🇫🇷
dynamix
2026-10-01 13:13:55
UTC ·
(1 month ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-01 13:02:18
UTC ·
(1 month ago)
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.87.43.14
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "- ...
show more
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)" 34.87.43.14
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 34.87.43.14
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.87.43.14
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" 34.87.43.14
34.87.43.14 - - [01/Oct/2026:08:02:17 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 34.87.43.14
34.87.43.14 - - [01
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-01 12:38:07
UTC ·
(1 month ago)
34.87.43.14 - - [01/Oct/2026:12:38:06 +0000] "GET /api%2F.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
Bad Web Bot
Web App Attack
Anonymous
2026-10-01 12:34:24
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack