🇳🇱
debestelapp
2026-10-14 03:30:09
(2 days ago)
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-14 01:37:19
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-10-14 01:25:41
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
abuse-detection
2026-10-13 23:37:17
(2 days ago)
Web security detection (http-sensitive-probe); path=/api/console/api_server; status=403
Hacking
Web App Attack
🇺🇸
dot.mg
2026-10-13 20:43:09
(3 days ago)
Bad behaviour
Web Spam
2026-10-13 18:55:46
(3 days ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.203.34.248 (CA/Canada/248.34.203.35.bc.go ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 35.203.34.248 (CA/Canada/248.34.203.35.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.203.34.248 - - [13/Oct/2026:20:55:45 +0200] "GET /files../.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
35.203.34.248 - - [13/Oct/2026:20:55:45 +0200] "GET /assets../.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
35.203.34.248 - - [13/Oct/2026:20:55:45 +0200] "GET /.//.env HTTP/2.0" 406 317 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
show less
Port Scan
🇬🇧
Aetherweb Ark
2026-10-13 17:16:05
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 35.203.34.248 (CA/Canada/248.34.203.35.bc.googl ...
show more
(mod_security) mod_security (id:949110) triggered by 35.203.34.248 (CA/Canada/248.34.203.35.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇲🇾
Rizzy
2026-10-13 17:09:32
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇮
oh.mg
2026-10-13 15:33:44
(3 days ago)
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "GET /robots.txt HTTP/1.1" 403 2191 "-" "CCBot/2.0 (h ...
show more
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "GET /robots.txt HTTP/1.1" 403 2191 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "GET /z9x8c7v6b5-debug-trigger-api.mrman.net HTTP/1.1" 403 2191 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "POST / HTTP/1.1" 403 2191 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "GET /uploads../.env HTTP/1.1" 403 499 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.203.34.248 - - [13/Oct/2026:17:33:43 +0200] "GET /files../.env HTTP/1.1" 403 499 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
...
show less
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-10-13 15:11:03
(3 days ago)
[13/Oct/2026:18:11:03 +0300] -- 35.203.34.248 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET / ...
show more
[13/Oct/2026:18:11:03 +0300] -- 35.203.34.248 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /assets/manifest.json HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇳🇱
Roderic
2026-10-13 14:36:08
(3 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
2026-10-13 14:15:39
(3 days ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
2026-10-13 13:45:24
(3 days ago)
[ns67.kdns.gr] httpd-config-scan: sites=portal.kapaweb.gr; logs=/var/www/vhosts/system/portal.kapawe ...
show more
[ns67.kdns.gr] httpd-config-scan: sites=portal.kapaweb.gr; logs=/var/www/vhosts/system/portal.kapaweb.gr/logs/proxy_access_ssl_log; samples=/media../.env | /assets../.env | /static../.env
show less
Hacking
Web App Attack
2026-10-13 10:45:25
(3 days ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 10:41:03
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 35.203.34.248 (248.34.203.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 35.203.34.248 (248.34.203.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:40:57.550104 2026] [security2:error] [pid 3753:tid 3753] [client 35.203.34.248:37868] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||christinepeat.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "christinepeat.com"] [uri "/z9x8c7v6b5-debug-trigger-christinepeat.com"] [unique_id "as4KuTmOCqqFNdktRQPGAwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack