Anonymous
2026-10-26 13:15:00
UTC ·
(2 weeks ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-10-26 08:54:46
UTC ·
(2 weeks ago)
Multiple WAF Violations
Web App Attack
🇧🇪
boxed-it
2026-10-26 07:22:09
UTC ·
(2 weeks ago)
GET /console (Tarpitted for 11s, wasted 720B)
Web App Attack
🇲🇾
Rizzy
2026-10-26 07:08:38
UTC ·
(2 weeks ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-10-26 05:53:04
UTC ·
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TAY
2026-10-25 19:16:54
UTC ·
(2 weeks ago)
34.104.214.44 - - [26/Oct/2026:03:16:52 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.104.214.44 - - [26/Oct/2026:03:16:53 +0800] "GET /_image?href=/../../../.env HTTP/1.1" ...
show more
34.104.214.44 - - [26/Oct/2026:03:16:52 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.104.214.44 - - [26/Oct/2026:03:16:53 +0800] "GET /_image?href=/../../../.env HTTP/1.1" 404 363 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.104.214.44 - - [26/Oct/2026:03:16:53 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 6444 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.104.214.44 - - [26/Oct/2026:03:16:53 +0800] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 414 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.104.214.44 - - [26/Oct/2026:03:16:54 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 414 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https
...
show less
Brute-Force
🇬🇧
consul.to
2026-10-25 16:43:19
UTC ·
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TAY
2026-10-25 15:01:59
UTC ·
(2 weeks ago)
34.104.214.44 - - [25/Oct/2026:23:01:56 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.104.214.44 - - [25/Oct/2026:23:01:57 +0800] ...
show more
34.104.214.44 - - [25/Oct/2026:23:01:56 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.104.214.44 - - [25/Oct/2026:23:01:57 +0800] "GET /@fs/../.env?import&raw?? HTTP/1.1" 404 7876 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.104.214.44 - - [25/Oct/2026:23:01:58 +0800] "GET /_nuxt/../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.104.214.44 - - [25/Oct/2026:23:01:58 +0800] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.104.214.44 - - [25/Oct/2026:23:01:58 +0800] "GET /_image?href=/../../../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
...
show less
Brute-Force
🇫🇷
dynamix
2026-10-23 11:27:20
UTC ·
(3 weeks ago)
Multiple WAF Violations
Web App Attack
🇫🇷
dynamix
2026-10-23 09:54:45
UTC ·
(3 weeks ago)
Automated web vulnerability and path enumeration scan with excessive 404 requests
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-23 09:19:53
UTC ·
(3 weeks ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇺🇸
IndigoRidge
2026-10-23 08:24:10
UTC ·
(3 weeks ago)
[23/Oct/2026:04:24:06.548703 --0400] atsZpk9lrNMPxp1ars-GTQAAARM 34.104.214.44 45130 205.233.18.17 7081
[23/Oct/2026:04:24:09.325353 --0400] atsZqcg0yvMmMwJHed9TzAAAABc 34.104.214.44 45274 205.233.18.17 7081
[23/Oct/2026:04:24:09.328042 --0400] atsZq ...
show more
[23/Oct/2026:04:24:06.548703 --0400] atsZpk9lrNMPxp1ars-GTQAAARM 34.104.214.44 45130 205.233.18.17 7081
[23/Oct/2026:04:24:09.325353 --0400] atsZqcg0yvMmMwJHed9TzAAAABc 34.104.214.44 45274 205.233.18.17 7081
[23/Oct/2026:04:24:09.328042 --0400] atsZqU9lrNMPxp1ars-GUQAAARI 34.104.214.44 45324 205.233.18.17 7081
[23/Oct/2026:04:24:09.328772 --0400] atsZqcg0yvMmMwJHed9TzgAAAAc 34.104.214.44 45218 205.233.18.17 7081
[23/Oct/2026:04:24:09.330019 --0400] atsZqcg0yvMmMwJHed9TzwAAABA 34.104.214.44 45288 205.233.18.17 7081
...
show less
Hacking
🇳🇱
Site.eu
2026-10-23 07:34:22
UTC ·
(3 weeks ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
COMAITE
2026-10-22 23:27:15
UTC ·
(3 weeks ago)
Suspicious URL access.
Web App Attack
Anonymous
2026-10-22 18:48:26
UTC ·
(3 weeks ago)
[ns31.kdns.gr] httpd-config-scan: sites=global; logs=/var/log/httpd/access_log; samples=/.env.development | /.env.local::$data | /.env.production
Hacking
Web App Attack