🇮🇩
fazar
2026-11-06 19:21:30
UTC ·
(5 days ago)
bad-behavior: 15 attempts from 35.201.217.30 on node: bdj02
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-11-06 10:33:49
UTC ·
(5 days ago)
110 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇨🇭
dalslab ltd
2026-11-06 09:55:04
UTC ·
(5 days ago)
[06/Nov/2026:10:55:01 +0100] - 404 404 - GET https vault.dalslab.com "/robots.txt" [Client 35.201.217.30] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-"
[06/Nov/2026:10:55:01 ...
show more
[06/Nov/2026:10:55:01 +0100] - 404 404 - GET https vault.dalslab.com "/robots.txt" [Client 35.201.217.30] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" "-"
[06/Nov/2026:10:55:01 +0100] - 404 404 - GET https vault.dalslab.com "/sitemap.xml" [Client 35.201.217.30] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "-"
[06/Nov/2026:10:55:02 +0100] - 404 404 - GET https vault.dalslab.com "/sitemap_index.xml" [Client 35.201.217.30] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-"
[06/Nov/2026:10:55:03 +0100] - 404 404 - GET https vault.dalslab.com "/z9x8c7v6b5-debug-trigger-vault.dalslab.com" [Client 35.201.217.30] [Length 832] [Gzip 2.20] [Sent-to 10.1.1.248] "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" "-"
[06/Nov/2026:10:55:03 +0100] - 404 404 - GET https vault.dalslab.com "/
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇯🇵
ZEROVOX
2026-11-06 09:38:49
UTC ·
(5 days ago)
CrowdSec: crowdsecurity/http-crawl-non_statics detected
Web App Attack
🇫🇷
dynamix
2026-11-06 08:06:31
UTC ·
(5 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
EDSL
2026-11-06 07:09:09
UTC ·
(5 days ago)
[gps.edsl.fr] Blocked by SysWarden Firewall (Web Attack Port 80)
Port Scan
Hacking
Web App Attack
🇨🇦
Mediashaker
2026-11-06 04:58:24
UTC ·
(6 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.201.217.30 (TW/Taiwan/30.217.201.35.bc.googleusercontent.com)
Bad Web Bot
🇩🇪
LRob
2026-11-06 02:03:45
UTC ·
(6 days ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm), Mozilla/5.0 (compatible; Hunyuan/1.0; + ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm), Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/) (+4 more) | path: /.env%3F.css, /wp-admin/.env, /.aws/credentials%3F.txt (+5 more)
show less
Bad Web Bot
🇳🇱
Alt255
2026-11-06 01:47:46
UTC ·
(6 days ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.217.30 - - [06/Nov/2026:02:47:25 +0100] "GET /static../.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.co ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.217.30 - - [06/Nov/2026:02:47:25 +0100] "GET /static../.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Bad Web Bot
Web App Attack
🇨🇦
CentiDevOps
2026-11-06 01:45:50
UTC ·
(6 days ago)
Web app scan: 433 requests in 13 s across 3 domains (301/302/404/444). Paths: /.git/config, /assets../.env, /build../.env (+42 more). Sample: 2026-11-06T01:45:50Z "GET /build../.env" 301
Hacking
Web App Attack
🇧🇪
voormedia
2026-11-06 01:32:48
UTC ·
(6 days ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 01:27:27
UTC ·
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 35.201.217.30 (30.217.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:27:22.311820 2026] [security2:error] [pid 22353:tid ...
show more
(mod_security) mod_security (id:210730) triggered by 35.201.217.30 (30.217.201.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 20:27:22.311820 2026] [security2:error] [pid 22353:tid 22353] [client 35.201.217.30:36278] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||littlepeopledelivery.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "littlepeopledelivery.com"] [uri "/z9x8c7v6b5-debug-trigger-littlepeopledelivery.com"] [unique_id "au0s-pPg8XiaCZOsLOZerwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 01:05:30
UTC ·
(6 days ago)
20 attempts against mh-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 01:02:11
UTC ·
(6 days ago)
Attempted access to sensitive endpoint (/login) detected. Automated scan or unauthorized probing.
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-11-06 00:45:38
UTC ·
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-bad-user-agent
Web App Attack
Bad Web Bot