🇧🇪
taivas.nl
2026-10-01 04:32:51
(11 hours ago)
Many_bad_calls
Web App Attack
🇳🇱
Site.eu
2026-09-30 19:37:25
(20 hours ago)
Excessive multi-domain requests
Brute-Force
🇸🇬
simpeg-adm.bandung.go.id
2026-09-30 19:31:05
(20 hours ago)
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/.vite/manifest.json"
30/Sep/2026:19:31:04 +0000;34.95.214. ...
show more
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/.vite/manifest.json"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/dist/.vite/manifest.json"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/dist/manifest.json"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/65up4fwqkim7t8m85mgo"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/z9x8c7v6b5-debug-trigger-vendors.topherfilms.com"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/vlpw4s9bei6bxaapo6k7"
30/Sep/2026:19:31:04 +0000;34.95.214.90;"/lib/terminal-xhr.php"
...
show less
Web Spam
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-30 17:08:46
(23 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-30 13:40:03
(1 day ago)
| [Dangerous/Brazil] Aggressive IP 34.95.214.90 (~30 hits). Type: DoS Defender- Web server 400 error ...
show more
| [Dangerous/Brazil] Aggressive IP 34.95.214.90 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
🇸🇬
Cloudkul Cloudkul
2026-09-30 13:31:45
(1 day ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requ ...
show more
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
show less
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-09-30 13:26:12
(1 day ago)
[ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.95.214.90 - - \[30/Sep/2026:15:26:00 +0200\] "GET /@fs/app/.env.production\?import\&raw\?\? HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36\; compatible\; OAI-SearchBot/1.4\; +https://openai.com/searchbot"
34.95.214.90 - - \[30/Sep/2026:15:26:00 +0200\] "GET /@fs/src/.env\?import\&raw\?\? HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; MistralAI-User/1.0\; +https://mistral.ai/\)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 13:16:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 09:16:38.597334 2026] [security2:error] [pid 9630:tid 9656] [client 34.95.214.90:56152] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.vnbcares.com"] [uri "/.env.js"] [unique_id "ar0LttKzO979YClGXiGlpwAAAJI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
etu brutus
2026-09-30 12:56:04
(1 day ago)
34.95.214.90 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
2026-09-30 12:53:22
(1 day ago)
Portscan: TCP/8443 (3x), TCP/8080 (3x)
Port Scan
🇺🇸
TPI-Abuse
2026-09-30 12:42:47
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 08:42:41.316674 2026] [security2:error] [pid 27368:tid 27368] [client 34.95.214.90:48482] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||scruffware.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "scruffware.com"] [uri "/z9x8c7v6b5-debug-trigger-scruffware.com"] [unique_id "ar0DwUOH2B-mrGuaJfzAvgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-30 11:39:29
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.214.90 (90.214.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 07:39:23.711842 2026] [security2:error] [pid 29304:tid 29304] [client 34.95.214.90:43766] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.scrunchiebutt.com"] [uri "/uploads../.env"] [unique_id "arz0684ziwcnNsqsMVmXjwAAACo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
NXTwoThou
2026-09-30 11:13:41
(1 day ago)
/graphql
Web App Attack
🇩🇪
updown.io
2026-09-30 10:47:58
(1 day ago)
{"level":"info","ts":1790765273.0611894,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1790765273.0611894,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.95.214.90","remote_port":"41218","client_ip":"34.95.214.90","proto":"HTTP/2.0","method":"GET","host":"status.scottmathson.com","uri":"/config/firebase-admin.json","headers":{"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.scottmathson.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000237623,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1790765
...
show less
DDoS Attack
Web App Attack
🇳🇱
Alt255
2026-09-30 10:42:54
(1 day ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.95.214.90 - - [30/Sep/2026:12:42:34 +0200] "GET /.env.php.bak HTTP/1.1" 404 2065 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
