🇩🇪
bazter.pro
2026-10-14 02:11:28
(3 days ago)
Fail2Ban: apache-ratelimit - 20 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-14 00:55:15
(3 days ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.243.109.29 (JP/Japan/29.109.243.35.bc.googleusercontent.com ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.243.109.29 (JP/Japan/29.109.243.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.243.109.29 - - [14/Oct/2026:02:55:12 +0200] "GET /m9enuzwxkc7kj062qcpx HTTP/2.0" 200 11914 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" host=johnfante.org
show less
Port Scan
🇫🇷
✨
2026-10-14 00:49:16
(3 days ago)
Domain : redirect.netenergy.uk
Rule : env
2026-10-14 00:46:00 217.194.210.152 GET /static/..;/..;/.e ...
show more
Domain : redirect.netenergy.uk
Rule : env
2026-10-14 00:46:00 217.194.210.152 GET /static/..;/..;/.env - 443 - 35.243.109.29 HTTP/2 Mozilla/5.0 (compatible; MoonshotBot/1.0; https://kimi.ai/) - www.healthandsafetyonline.org 404 0 2 1533 462 240 - -
show less
Hacking
SQL Injection
🇧🇪
cmbplf
2026-10-14 00:32:52
(3 days ago)
299 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
2026-10-14 00:21:39
(3 days ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
2026-10-13 23:47:15
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
PKThai
2026-10-13 22:48:38
(3 days ago)
Way too many 4xx errors in too short a time - Repeat offender 35.243.109.29 banned at least 2 times ...
show more
Way too many 4xx errors in too short a time - Repeat offender 35.243.109.29 banned at least 2 times in the last 7 days
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-10-13 22:31:52
(3 days ago)
"GET /robots.txt HTTP/1.1" 404
"GET /build/manifest.json HTTP/1.1" 404
"GET /signin HTTP/1.1" 404
"G ...
show more
"GET /robots.txt HTTP/1.1" 404
"GET /build/manifest.json HTTP/1.1" 404
"GET /signin HTTP/1.1" 404
"GET /onboarding HTTP/1.1" 404
"GET /dist/manifest.json HTTP/1.1" 404
"GET /dashboard/billing HTTP/1.1" 404
"GET /api-keys HTTP/1.1" 404
"GET /settings/api-keys HTTP/1.1" 404
"GET /tokens HTTP/1.1" 404
"GET /integrations HTTP/1.1" 404
"GET /webhooks HTTP/1.1" 404
"GET /manage HTTP/1.1" 404
"GET /.vite/manifest.json HTTP/1.1" 404
"GET /oegv46oqno0gtop7pm26 HTTP/1.1" 404
"GET /internal HTTP/1.1" 404
"GET /members HTTP/1.1" 404
"GET /admin/users HTTP/1.1" 404
"GET /users HTTP/1.1" 404
"GET /dist/.vite/manifest.json HTTP/1.1" 404
"GET /docs HTTP/1.1" 404
"GET
show less
Web App Attack
🇬🇧
Comberton
2026-10-13 22:17:20
(3 days ago)
Ban via F2B wordfence
Brute-Force
Web App Attack
🇩🇪
tentwentyfour
2026-10-13 22:13:27
(3 days ago)
Blocked for probing for sensitive web application components
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-13 21:43:36
(3 days ago)
[cb-04al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-04al] Excessive 404 errors (web scanning): 29 suspicious requests detected by fail2ban jail nginx-404. Example: 35.243.109.29 - - [13/Oct/2026:23:43:35 +0200] "GET /portal HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.243.109.29 - - [13/Oct/2026:23:43:35 +0200] "GET /z9x8c7v6b5-debug-trigger-hotsoup.org HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
35.243.109.29 - - [13/Oct/2026:23:43:35 +0200] "GET /dashboard/billing HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.243.109.29 - - [13/Oct/2026:23:43:35 +0200] "GET /signup HTTP/1.0" 404 8563 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
35.2
...
show less
Bad Web Bot
Web App Attack
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-10-13 21:16:13
(3 days ago)
[Tue Oct 13 15:16:11.283281 2026] [authz_core:error] [pid 39915:tid 139747908126272] [client 35.243. ...
show more
[Tue Oct 13 15:16:11.283281 2026] [authz_core:error] [pid 39915:tid 139747908126272] [client 35.243.109.29:52002] AH01630: client denied by server configuration: /var/www/horde/config/.env
[Tue Oct 13 15:16:11.424965 2026] [authz_core:error] [pid 39915:tid 139747790628416] [client 35.243.109.29:52002] AH01630: client denied by server configuration: /var/www/horde/.env.bak
[Tue Oct 13 15:16:13.234742 2026] [authz_core:error] [pid 39915:tid 139747882948160] [client 35.243.109.29:52002] AH01630: client denied by server configuration: /var/www/horde/.htpasswd
...
show less
Bad Web Bot
🇩🇪
paissangroup
2026-10-13 20:27:47
(3 days ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 19:00:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.243.109.29 (29.109.243.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.243.109.29 (29.109.243.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 15:00:14.795799 2026] [security2:error] [pid 30804:tid 30804] [client 35.243.109.29:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.hcoahawaii.org"] [uri "/css../.env"] [unique_id "as5_vlzPGPNRLh8xlwx1QgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-10-13 18:20:49
(3 days ago)
(mod_security) mod_security (id:930100) triggered by 35.243.109.29 (JP/Japan/29.109.243.35.bc.google ...
show more
(mod_security) mod_security (id:930100) triggered by 35.243.109.29 (JP/Japan/29.109.243.35.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack