🇪🇸
Gem
2026-11-06 23:07:58
UTC ·
(1 week ago)
Unauthorized web scan.
Web App Attack
🇧🇷
ICS Labs
2026-11-04 14:35:14
UTC ·
(1 week ago)
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
Exploited Host
🇩🇪
Alpiskris
2026-11-02 23:28:37
UTC ·
(1 week ago)
34.124.202.195 - - [02/Nov/2026:23:28:31 +0000] "POST /graphql HTTP/1.1" 405 552 "https://www.cerise.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.124.202.195 - - [02/No ...
show more
34.124.202.195 - - [02/Nov/2026:23:28:31 +0000] "POST /graphql HTTP/1.1" 405 552 "https://www.cerise.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.124.202.195 - - [02/Nov/2026:23:28:31 +0000] "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.124.202.195 - - [02/Nov/2026:23:28:31 +0000] "GET /wp/.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.124.202.195 - - [02/Nov/2026:23:28:31 +0000] "GET /cache/original/%2e%2e/.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.124.202.195 - - [02/Nov/2026:23:28:33 +0000] "POST /v1/graphql HTTP/1.1" 405 552 "https://www.cerise.es" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-11-02 23:18:52
UTC ·
(1 week ago)
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-11-02 21:54:27
UTC ·
(1 week ago)
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET /assets../.env HTTP/2.0" 403 194 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2 ...
show more
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET /assets../.env HTTP/2.0" 403 194 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "192.168.111.179"
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET /files../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" "192.168.164.86"
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET /css../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "100.106.106.238"
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET /img../.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "100.78.112.124"
34.124.202.195 - - [02/Nov/2026:21:53:32 +0000] "GET //.env HTTP/2.0
...
show less
Web App Attack
🇫🇷
OrchidsRadiant
2026-11-02 21:27:00
UTC ·
(1 week ago)
aime.lesmatric.es:443 34.124.202.195 - - [02/Nov/2026:21:27:00 +0000] "GET /.env HTTP/2.0" 404 107 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 20:57:15
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.124.202.195 (195.202.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:57:08.543398 2026] [security2:error] [pid 3666:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.124.202.195 (195.202.124.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 15:57:08.543398 2026] [security2:error] [pid 3666:tid 3666] [client 34.124.202.195:56878] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.reparcol.es"] [uri "/appearance/../../.env"] [unique_id "auj5JPtMtU0bm7O0v5VJMAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-02 18:32:52
UTC ·
(1 week ago)
226 requests with url.path */proc/*
193 requests with url.path *credentials.json
133 requests with url.path *.php.bak
103 requests with url.path *config.json
Brute-Force
Bad Web Bot
2026-11-02 13:51:08
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
macrob
2026-11-02 13:44:28
UTC ·
(1 week ago)
2026/11/02 13:44:27 [error] 1725813#1725813: *24084539 access forbidden by rule, client: 34.124.202.195, server: binixo.es, request: "GET /static../.env HTTP/2.0", host: "binixo.es"
2026/11/02 13:44:27 [error] 1725813#1725813: *24084539 access forbid ...
show more
2026/11/02 13:44:27 [error] 1725813#1725813: *24084539 access forbidden by rule, client: 34.124.202.195, server: binixo.es, request: "GET /static../.env HTTP/2.0", host: "binixo.es"
2026/11/02 13:44:27 [error] 1725813#1725813: *24084539 access forbidden by rule, client: 34.124.202.195, server: binixo.es, request: "GET /uploads../.env HTTP/2.0", host: "binixo.es"
2026/11/02 13:44:27 [error] 1725813#1725813: *24084539 access forbidden by rule, client: 34.124.202.195, server: binixo.es, request: "GET /media../.env HTTP/2.0", host: "binixo.es"
...
show less
Web App Attack
🇧🇪
voormedia
2026-11-02 12:56:16
UTC ·
(1 week ago)
Accessed trap at '/.env'
Web App Attack
🇫🇷
GabrielJST
2026-11-02 12:38:12
UTC ·
(1 week ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.124.202.195 (SG/Singapore/195.202.124.34.bc.googleusercontent.com)
Bad Web Bot
🇬🇧
MrTumnus
2026-11-02 12:35:17
UTC ·
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
🇬🇧
consul.to
2026-11-02 12:32:09
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
updown.io
2026-11-02 12:02:03
UTC ·
(1 week ago)
{"level":"info","ts":1793620919.114616,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.124.202.195","remote_port":"55390","client_ip":"34.124.202.195","proto":"HTTP/2.0","method":"GET","host":"uptime.uneatlantico.es ...
show more
{"level":"info","ts":1793620919.114616,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.124.202.195","remote_port":"55390","client_ip":"34.124.202.195","proto":"HTTP/2.0","method":"GET","host":"uptime.uneatlantico.es","uri":"/rclone.conf","headers":{"Cookie":["REDACTED"],"Accept-Encoding":["gzip"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"uptime.uneatlantico.es","ech":false}},"bytes_read":0,"user_id":"","duration":0.000738149,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info
...
show less
DDoS Attack
Web App Attack
