Anonymous
2026-10-12 22:04:10
(16 minutes ago)
CrowdSec detection: crowdsecurity/http-path-traversal-probing
Web App Attack
π©πͺ
crypto i trust, hold i must
2026-10-12 20:41:25
(1 hour ago)
Web scanner path: /.ssh/config
Web App Attack
Anonymous
2026-10-12 20:17:45
(2 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-12 19:17:32
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.24.252 (252.24.11.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.24.252 (252.24.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 15:17:27.090283 2026] [security2:error] [pid 31486:tid 31486] [client 34.11.24.252:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "yggdrasil.org"] [uri "/@fs/root/.env"] [unique_id "as0yR3LQenLTX9SaYWN_6QAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
dbmwebdesign
2026-10-12 19:10:19
(3 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
πͺπΈ
robotstxt
2026-10-12 18:55:50
(3 hours ago)
34.11.24.252 - - [12/Oct/2026:18:55:04 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://wppodcast. ...
show more
34.11.24.252 - - [12/Oct/2026:18:55:04 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://wppodcast.org/robots.txt" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.11.24.252"
34.11.24.252 - - [12/Oct/2026:18:55:05 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 15116 "https://wppodcast.org/dist/.vite/manifest.json" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.11.24.252"
34.11.24.252 - - [12/Oct/2026:18:55:05 +0000] "GET /z9x8c7v6b5-debug-trigger-wppodcast.org HTTP/2.0" 403 15320 "https://wppodcast.org/z9x8c7v6b5-debug-trigger-wppodcast.org" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.11.24.252"
34.11.24.252 - - [12/Oct/2026:18:55:06 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 15116 "https://wppodcast.org/.vit
...
show less
Web App Attack
π¬π§
Aetherweb Ark
2026-10-12 18:29:00
(3 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.11.24.252 (US/United States/252.24.11.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.11.24.252 (US/United States/252.24.11.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
π©πͺ
Gwyneth Llewelyn
2026-10-12 18:01:23
(4 hours ago)
2026/10/12 19:01:17 [error] 4060694#4060694: *2571841 access forbidden by rule, client: 34.11.24.252 ...
show more
2026/10/12 19:01:17 [error] 4060694#4060694: *2571841 access forbidden by rule, client: 34.11.24.252, server: vp-arc.org, request: "GET /public.api/.env HTTP/2.0", host: "vp-arc.org"
2026/10/12 19:01:21 [error] 4060693#4060693: *2571839 access forbidden by rule, client: 34.11.24.252, server: vp-arc.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "vp-arc.org"
2026/10/12 19:01:21 [error] 4060693#4060693: *2571817 access forbidden by rule, client: 34.11.24.252, server: vp-arc.org, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "vp-arc.org"
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 17:48:32
(4 hours ago)
34.11.24.252 detected on srv01
Brute-Force
π³π±
Site.eu
2026-10-12 17:31:29
(4 hours ago)
Excessive 404/403 errors
Brute-Force
π³π±
Site.eu
2026-10-12 16:46:24
(5 hours ago)
Excessive multi-domain requests
Brute-Force
π©πͺ
crypto i trust, hold i must
2026-10-12 16:27:02
(5 hours ago)
Web scanner path: /_image?href=/../../../.env
Web App Attack
πΊπΈ
JonathanYoung2161
2026-10-12 16:21:50
(5 hours ago)
trekgalactic.org 34.11.24.252 - - [12/Oct/2026:11:21:48 -0500] "GET /.env.config HTTP/2.0" 403 3171 ...
show more
trekgalactic.org 34.11.24.252 - - [12/Oct/2026:11:21:48 -0500] "GET /.env.config HTTP/2.0" 403 3171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
trekgalactic.org 34.11.24.252 - - [12/Oct/2026:11:21:48 -0500] "GET /.config/gcloud/credentials.db HTTP/2.0" 404 3199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
trekgalactic.org 34.11.24.252 - - [12/Oct/2026:11:21:48 -0500] "GET /.env.testing HTTP/2.0" 403 3171 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-12 16:20:23
(5 hours ago)
Sensitive file access attempt
Hacking
π³π±
mieg
2026-10-12 16:18:42
(6 hours ago)
Web vulnerability probing
Brute-Force
Web App Attack