Anonymous
2026-10-25 04:07:09
(18 hours ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
Anonymous
2026-10-25 03:20:15
(18 hours ago)
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla ...
show more
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 34.13.199.155
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.keys HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.13.199.155
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 34.13.199.155
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.production.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.13.199.155
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.staging.local HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 34.13.199.155
34.13.199.155 - - [24/Oct/2026:22:20:14 -0500] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
dermatovirtual
2026-10-25 02:16:22
(19 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 143 unauthorized requests recorded between 2026-10-25 02:12:34 UTC and 2026-10-25 02:12:45 UTC (rate: ~143 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-25 02:12:45 UTC] IP: 34.13.199.155 - W3C IIS (Port 443): GET /app/..;/.env -> HTTP 404 [CLIENT: 34.13.199.155]
[2026-10-25 02:12:45 UTC] IP: 34.13.199.155 - W3C IIS (Port 443): GET /static/..;/..;/.env -> HTTP 404 [CLIENT: 34.13.199.155]
[2026-10-25 02:12:45 UTC] IP: 34.13.199.155 - W3C IIS (Port 443): GET /static/..;/.env -> HTTP 404 [CLIENT: 34.13.199.155]
show less
Bad Web Bot
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-25 01:54:42
(20 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐ฉ๐ช
bazter.pro
2026-10-25 01:23:19
(20 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 01:08:19
(21 hours ago)
Malicious scan detected (score: 4 >= 4): Directory Traversal (Path) on path: /api/orders/..%2fadmin/ ...
show more
Malicious scan detected (score: 4 >= 4): Directory Traversal (Path) on path: /api/orders/..%2fadmin/config.json
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-24 23:56:29
(22 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-24 23:15:35
(22 hours ago)
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-04al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.13.199.155 - - [25/Oct/2026:01:15:28 +0200] "GET /login HTTP/2.0" 404 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.13.199.155 - - [25/Oct/2026:01:15:28 +0200] "GET /z9x8c7v6b5-debug-trigger-westland.nl HTTP/2.0" 404 1197 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.13.199.155 - - [25/Oct/2026:01:15:28 +0200] "GET /forgot-password HTTP/2.0" 404 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.13.199.155 - - [25/Oct/2026:01:15:28 +0200] "GET /dashboard/api-keys HTTP/2.0" 404 1197 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-24 22:34:19
(23 hours ago)
Aggressive web scan
Web App Attack
Anonymous
2026-10-24 22:31:12
(23 hours ago)
Sensitive file access attempt
Hacking
๐ซ๐ท
SpaceHost-Server
2026-10-24 22:20:16
(23 hours ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-24 21:59:32
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-23.
show less
Web App Attack
SSH
Hacking
๐บ๐ธ
Matthew Ping
2026-10-24 21:30:01
(1 day ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on dedicated.
DDoS Attack
Brute-Force
๐จ๐ฆ
Anytech
2026-10-24 21:18:06
(1 day ago)
Blocked by ConnMonitor
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-24 20:20:02
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack