🇳🇱
Alt255
2026-10-28 06:54:12
(10 hours ago)
[ti-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.255.218.191 - - [28/Oct/2026:07:54:04 +0100] "GET /sitemap.xml HTTP/2.0" 404 6651 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent ...
show more
[ti-09al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.255.218.191 - - [28/Oct/2026:07:54:04 +0100] "GET /sitemap.xml HTTP/2.0" 404 6651 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.255.218.191 - - [28/Oct/2026:07:54:05 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 6628 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.255.218.191 - - [28/Oct/2026:07:54:05 +0100] "GET /z9x8c7v6b5-debug-trigger-mail.zozien.nl HTTP/2.0" 404 6660 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.255.218.191 - - [28/Oct/2026:07:54:05 +0100] "GET /asset-manifest.json HTTP/2.0" 404 6628 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x6
...
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-10-28 06:07:01
(11 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇳🇱
Alt255
2026-10-28 06:06:10
(11 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.255.218.191 - - [28/Oct/2026:07:05:53 +0100] "GET /static../.env HTTP/2.0" 403 32 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://develo ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.255.218.191 - - [28/Oct/2026:07:05:53 +0100] "GET /static../.env HTTP/2.0" 403 32 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
paissangroup
2026-10-27 23:49:56
(17 hours ago)
Multiple WAF Violations
Web App Attack
2026-10-27 20:44:19
(20 hours ago)
35.255.218.191 - - [27/Oct/2026:21:44:13 +0100] "GET /.git/config HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 12:44:44
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 35.255.218.191 (191.218.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 08:44:36.170565 2026] [security2:error] [pid 11865:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 35.255.218.191 (191.218.255.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 08:44:36.170565 2026] [security2:error] [pid 11865:tid 11865] [client 35.255.218.191:49514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.visithavelock.ca"] [uri "/.htpasswd"] [unique_id "auCctCPcOB-e2zAYqMddwwAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-27 12:17:54
(1 day ago)
{"level":"info","ts":1793103472.2917173,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.255.218.191","remote_port":"48394","client_ip":"35.255.218.191","proto":"HTTP/2.0","method":"GET","host":"status.wbkc.ca","uri" ...
show more
{"level":"info","ts":1793103472.2917173,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.255.218.191","remote_port":"48394","client_ip":"35.255.218.191","proto":"HTTP/2.0","method":"GET","host":"status.wbkc.ca","uri":"/.env.example","headers":{"X-Nextjs-Data":["1"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"],"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.wbkc.ca","ech":false}},"bytes_read":0,"user_id":"","duration":0.001112183,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1793103472.293232,"logger":"http.log.access.log1","msg":"handled request","request":{
...
show less
DDoS Attack
Web App Attack
🇨🇦
Anytech
2026-10-27 04:03:47
(1 day ago)
Blocked by ConnMonitor
Web App Attack
🇨🇦
Mediashaker
2026-10-27 00:26:14
(1 day ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.255.218.191 (US/United States/191.218.255.35.bc.googleusercontent.com)
Bad Web Bot
🇨🇦
polycoda
2026-10-26 23:06:54
(1 day ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
Hacking
Bad Web Bot
Web App Attack
🇨🇦
CentiDevOps
2026-10-26 20:58:21
(1 day ago)
Web app scan: 75 requests in 2 s across 2 domains (301/404). Paths: /media../.env, /static../.env, /en/static../.env (+9 more). Sample: 2026-10-26T20:58:21Z "GET /media../.env" 301
Hacking
Web App Attack
🇨🇦
Dunham Support
2026-10-26 20:00:05
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 35.255.218.191 (US/United States/191.218.255.35.bc.googleusercontent.com)
SQL Injection
🇳🇱
Savvii
2026-10-26 19:42:37
(1 day ago)
20 attempts against mh-misbehave-ban on ficus
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-26 18:19:01
(1 day ago)
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.255.218.191 - - [26/Oct/2026:19:18:45 +0100] "GET /sitemap.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like ...
show more
[ti-26al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 35.255.218.191 - - [26/Oct/2026:19:18:45 +0100] "GET /sitemap.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.255.218.191 - - [26/Oct/2026:19:18:46 +0100] "GET /sitemap_index.xml HTTP/1.1" 404 2107 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
35.255.218.191 - - [26/Oct/2026:19:18:46 +0100] "GET /signin HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36"
35.255.218.191 - - [26/Oct/2026:19:18:46 +0100] "GET /panel HTTP/1.1" 404 2107 "-" "Mozilla/5.0 (Linux; Android 10; K) App
...
show less
Bad Web Bot
Web App Attack
🇳🇦
jacqueskruger
2026-10-26 13:21:20
(2 days ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 217 confirmed alerts / 218 triggering events. Detections: candor/high-confidence-scanner, crowdsecurity/vpatch-CVE-2025-29927. Latest evidence UTC: 2026-10-26T05:16:0 ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 217 confirmed alerts / 218 triggering events. Detections: candor/high-confidence-scanner, crowdsecurity/vpatch-CVE-2025-29927. Latest evidence UTC: 2026-10-26T05:16:04Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
