|
🇩🇪
MBombeck
|
|
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
|
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
🇹🇷
hostopya.com
|
|
[plesk-apache] 6 failed attempt(s). Log: [Sun Oct 18 23:15:21.181095 2026] [authz_core:error] [pid 3145956] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/wallet.wiantex.com/.env|[Sun Oct 18 23:15:2 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Sun Oct 18 23:15:21.181095 2026] [authz_core:error] [pid 3145956] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/wallet.wiantex.com/.env|[Sun Oct 18 23:15:21.402158 2026] [authz_core:error] [pid 3153563] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/wallet.wiantex.com/.env.local|[Sun Oct 18 23:15:21.624511 2026] [authz_core:error] [pid 3153546] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/wallet.wiantex.com/.env.production|[Sun Oct 18 23:15:21.854718 2026] [authz_core:error] [pid 3241194] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com/wallet.wiantex.com/.env.staging|[Sun Oct 18 23:15:22.076582 2026] [authz_core:error] [pid 3153561] [client 34.94.82.41:0] AH01630: client denied by server configuration: /var/www/vhosts/wiantex.com
show less
|
Brute-Force
Web App Attack
|
|
🇩🇪
netclix.gr
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.94.82.41 (US/United States/41.82.94.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇳🇱
Alt255
|
|
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.94.82.41 - - [23/Oct/2026:14:42:49 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.94.82.41 - - [23/Oct/2026:14:42:49 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
infra-monitor
|
|
Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-sensitive-files, crowdsecurity/http-probing
|
Port Scan
Web App Attack
|
|
🇩🇪
MBombeck
|
|
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
34.94.82.41 - - [22/Oct/2026:22:14:16 +0000] "POST /wp-login.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.94.82.41"
34.94.82.41 - - [22/Oct/202 ...
show more
34.94.82.41 - - [22/Oct/2026:22:14:16 +0000] "POST /wp-login.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.94.82.41"
34.94.82.41 - - [22/Oct/2026:22:14:16 +0000] "POST /wp-login.php HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.94.82.41"
34.94.82.41 - - [22/Oct/2026:22:14:17 +0000] "GET /.git/config HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.94.82.41"
34.94.82.41 - - [22/Oct/2026:22:14:18 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.94.82.41"
34.94.82.41 - - [22/Oct/2026:22:14:15 +0000] "POST /contrataaegon/ HTTP/1.1" 403 99648 "-" "Mozilla/5.0 (X11; Linux x86
...
show less
|
Web App Attack
|
|
🇦🇹
SchiWaGoA
|
|
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
|
Web App Attack
Bad Web Bot
|
|
🇪🇸
robotstxt
|
|
34.94.82.41 - - [22/Oct/2026:18:41:48 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.94.82.41 - - [22/Oct/2026:18:41:49 +0000] "GET /.env ...
show more
34.94.82.41 - - [22/Oct/2026:18:41:48 +0000] "GET /.env HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.94.82.41 - - [22/Oct/2026:18:41:49 +0000] "GET /.env.local HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.94.82.41 - - [22/Oct/2026:18:41:49 +0000] "GET /.env.production HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.94.82.41 - - [22/Oct/2026:18:41:50 +0000] "GET /.env.staging HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.94.82.41 - - [22/Oct/2026:18:41:50 +0000] "GET /.env.development HTTP/1.1" 403 31 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/
...
show less
|
Web App Attack
|
|
🇺🇸
francelink.fr
|
|
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-22T09:50:54.000Z.
|
Web App Attack
|
|
🇩🇪
Hary74656
|
|
Fail2Ban on schani.hostmi.at: jail=apache-instablock, failures=1.
[client 34.94.82.41] [realclient 34.94.82.41] [22/Oct/2026:19:04:12 +0200] [vhost aschi.at] 403 "GET /.git/config HTTP/1.1"
|
Web App Attack
|
|
🇧🇬
HighWay
|
|
34.94.82.41 - - [22/Oct/2026:16:24:56 +0000] "GET /phpinfo.php HTTP/1.1" 404 7009 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.94.82.41 - - [22/Oct/2026:16:24:56 +0000] ...
show more
34.94.82.41 - - [22/Oct/2026:16:24:56 +0000] "GET /phpinfo.php HTTP/1.1" 404 7009 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.94.82.41 - - [22/Oct/2026:16:24:56 +0000] "GET /info.php HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.94.82.41 - - [22/Oct/2026:16:24:57 +0000] "GET /php.php HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.94.82.41 - - [22/Oct/2026:16:24:57 +0000] "GET /i.php HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.94.82.41 - - [22/Oct/2026:16:24:57 +0000] "GET /pi.php HTTP/1.1" 404 734 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
RamSet
|
|
[wx] HTTP-Probe on port 443 (via domain). 272 distinct paths probed in 24s. Sustained 277 req/min, 271 nonexistent paths (404). Paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development, /.env.test, /.env.remote, /.e ...
show more
[wx] HTTP-Probe on port 443 (via domain). 272 distinct paths probed in 24s. Sustained 277 req/min, 271 nonexistent paths (404). Paths: /.git/config, /.env, /.env.local, /.env.production, /.env.staging, /.env.development, /.env.test, /.env.remote, /.env.bak, /.env.backup, /.env.save, /.env.old, /.env.sample, /.env.example, /.env.dev, /.env.prod, /.env.stage, /.env.ci, /.env.docker, /.env.live, /.env.preprod, /.env.uat, /.env.dist, /.env.swp, /.env.txt, /.env.json, /.env.yaml, /.env.yml, /app/.env, /apps/.env, /api/.env, /web/.env, /site/.env, /public/.env, /admin/.env, /backend/.env, /server/.env, /frontend/.env, /src/.env, /core/.env, /core/app/.env, /config/.env, /private/.env, /application/.env, /bootstrap/.env, /database/.env, /storage/.env, /var/www/.env, /var/www/html/.env, /current/.env, /release/.env, /releases/.env, /shared/.env, /deploy/.env, /build/.env, /dist/.env, /public_html/.env, /htdocs/.env, /www/.env, /html/.env
show less
|
Bad Web Bot
Web App Attack
|