๐ช๐ธ
pipeline.es
2026-10-25 00:17:00
(1 hour ago)
Web scanning / probing for vulnerable paths
Port Scan
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-10-24 23:00:28
(3 hours ago)
Reported by TangerangKota-CSIRT. Status: MALICIOUS
Hacking
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-24 22:22:13
(3 hours ago)
Brute-Force
Web App Attack
๐ฎ๐ฉ
sockominfo
2026-10-24 22:00:09
(4 hours ago)
Multiple Next.js internal path accesses from 34.95.211.223 - Possible reconnaissance or attack. Thre ...
show more
Multiple Next.js internal path accesses from 34.95.211.223 - Possible reconnaissance or attack. Threat Score: 8.1/10 (HIGH). Reported by TangerangKota-CSIRT. Status: MALICIOUS
show less
Hacking
Web App Attack
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-24 20:13:24
(6 hours ago)
24/Oct/2026:20:13:13 +0000;34.95.211.223;"/sitemap.xml"
24/Oct/2026:20:13:18 +0000;34.95.211.223;"/s ...
show more
24/Oct/2026:20:13:13 +0000;34.95.211.223;"/sitemap.xml"
24/Oct/2026:20:13:18 +0000;34.95.211.223;"/sitemap_index.xml"
24/Oct/2026:20:13:21 +0000;34.95.211.223;"/s3bpurrccwbbzdhrs87f"
24/Oct/2026:20:13:23 +0000;34.95.211.223;"/z9x8c7v6b5-debug-trigger-app.weddingworkflows.com"
24/Oct/2026:20:13:23 +0000;34.95.211.223;"/vos89pfkih4nrzlie53p"
24/Oct/2026:20:13:23 +0000;34.95.211.223;"/.vite/manifest.json"
24/Oct/2026:20:13:23 +0000;34.95.211.223;"/dist/.vite/manifest.json"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ฉ๐ช
raph
2026-10-24 19:32:24
(6 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐ฌ๐ง
relianoid.com
2026-10-24 19:07:03
(7 hours ago)
404 Errors Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web App Attack
๐ซ๐ฎ
sibahota
2026-10-24 18:38:44
(7 hours ago)
34.95.211.223 - - [24/Oct/2026:18:38:41 +0000] admin.nidandiagnostic.com "GET /.env.staging.local HT ...
show more
34.95.211.223 - - [24/Oct/2026:18:38:41 +0000] admin.nidandiagnostic.com "GET /.env.staging.local HTTP/2.0" 403 26 0.000 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" - - - "http://admin.nidandiagnostic.com"
34.95.211.223 - - [24/Oct/2026:18:38:41 +0000] admin.nidandiagnostic.com "GET /.env.supabase HTTP/2.0" 403 26 0.000 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" - - - "http://admin.nidandiagnostic.com"
...
show less
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-24 18:28:01
(7 hours ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 16:57:59
(9 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.95.211.223 (223.211.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.95.211.223 (223.211.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 12:57:53.808469 2026] [security2:error] [pid 30832:tid 30832] [client 34.95.211.223:53498] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||weathercarib.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "weathercarib.com"] [uri "/z9x8c7v6b5-debug-trigger-weathercarib.com"] [unique_id "atzjkfR8CHjt6Um-0zUB1AAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-24 16:50:03
(9 hours ago)
crowdsecurity/http-path-traversal-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-24 16:35:11
(9 hours ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-24 15:46:40
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.211.223 (223.211.95.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.211.223 (223.211.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 24 11:46:35.594424 2026] [security2:error] [pid 829:tid 829] [client 34.95.211.223:38686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.env.supabase"] [unique_id "atzS2_u1Mws0w6ssttUOTAAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-24 15:32:03
(10 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallCustom) from BR.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoint: /settings | UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฌ๐ง
consul.to
2026-10-24 15:07:01
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack