πͺπΈ
tutaim.com
2026-10-02 22:00:11
(2 weeks ago)
β [03/10/26] This IP has been detected performing multiple attacks on websites (724 attempts blocked ...
show more
β [03/10/26] This IP has been detected performing multiple attacks on websites (724 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
π©πͺ
maxpower
2026-10-02 06:30:40
(2 weeks ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 34.138.2.199 (US/United States/199.2.138.34.bc.googleuserconte ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 34.138.2.199 (US/United States/199.2.138.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.138.2.199 - - [02/Oct/2026:08:30:36 +0200] "GET /service-worker.js HTTP/2.0" 200 11949 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" host=bm.microf1.net
show less
Port Scan
π§π·
Sysadmin-CLC
2026-10-02 06:09:23
(2 weeks ago)
Caught by f2b nginx-limit-req.
Web App Attack
DDoS Attack
πͺπΈ
el-brujo
2026-10-02 03:41:12
(2 weeks ago)
Cloudflare WAF: Request Path: /chatbot/.env Request Query: Host: status.elhacker.net userAgent: CCB ...
show more
Cloudflare WAF: Request Path: /chatbot/.env Request Query: Host: status.elhacker.net userAgent: CCBot/2.0 (https://commoncrawl.org/faq/) Action: block Source: firewallCustom ASN Description: Google LLC Country: US Method: GET Timestamp: 2026-10-02T03:41:12Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
π§πͺ
cmbplf
2026-10-02 02:47:47
(2 weeks ago)
119 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
πͺπΈ
tutaim.com
2026-10-02 01:00:02
(2 weeks ago)
β [02/10/26] This IP has been detected performing multiple attacks on websites (724 attempts blocked ...
show more
β [02/10/26] This IP has been detected performing multiple attacks on websites (724 attempts blocked). Potential malicious activity.
show less
Brute-Force
SSH
Web App Attack
FTP Brute-Force
π§πΎ
lns.bz
2026-10-02 00:22:20
(2 weeks ago)
.env scanning [BY]
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-02 00:18:18
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.138.2.199 (199.2.138.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.138.2.199 (199.2.138.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 01 20:18:11.972986 2026] [security2:error] [pid 10042:tid 10042] [client 34.138.2.199:37008] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ontrek.com"] [uri "/.env.php.bak"] [unique_id "ar74QwkwHrImx5y3qBwrqAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Gwyneth Llewelyn
2026-10-02 00:02:45
(2 weeks ago)
2026/10/02 01:02:42 [error] 2513#2513: *60096 access forbidden by rule, client: 34.138.2.199, server ...
show more
2026/10/02 01:02:42 [error] 2513#2513: *60096 access forbidden by rule, client: 34.138.2.199, server: [redacted], request: "GET /_nuxt/../.env HTTP/2.0", host: "web.betatechnologies.info"
2026/10/02 01:02:42 [error] 2513#2513: *60096 access forbidden by rule, client: 34.138.2.199, server: [redacted], request: "GET /laravel/.env HTTP/2.0", host: "web.betatechnologies.info"
2026/10/02 01:02:43 [error] 2513#2513: *60096 access forbidden by rule, client: 34.138.2.199, server: [redacted], request: "GET /storage/.env HTTP/2.0", host: "web.betatechnologies.info"
show less
Brute-Force
Web App Attack
πΊπΈ
abuse-opdc
2026-10-01 22:41:08
(2 weeks ago)
Malicious HTTP requests matching injection/exploit signatures.
Web App Attack
Brute-Force
π§π·
radardatelecom
2026-10-01 22:26:03
(2 weeks ago)
Blocked by Radar da Telecom firewall β abuseipdb
Bad Web Bot
Web App Attack
π³π±
ConsulHosting
2026-10-01 21:57:07
(2 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
π©πͺ
Gwyneth Llewelyn
2026-10-01 21:33:00
(3 weeks ago)
2026/10/01 22:32:57 [error] 2513#2513: *31066 access forbidden by rule, client: 34.138.2.199, server ...
show more
2026/10/01 22:32:57 [error] 2513#2513: *31066 access forbidden by rule, client: 34.138.2.199, server: simetria.org, request: "GET /static../.env HTTP/2.0", host: "simetria.org"
2026/10/01 22:32:58 [error] 2513#2513: *31068 access forbidden by rule, client: 34.138.2.199, server: simetria.org, request: "GET /media../.env HTTP/2.0", host: "simetria.org"
2026/10/01 22:32:58 [error] 2513#2513: *31073 access forbidden by rule, client: 34.138.2.199, server: simetria.org, request: "GET /files../.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack
πΊπΈ
hostmach
2026-10-01 21:00:29
(3 weeks ago)
(cpanel) Failed cPanel login from 34.138.2.199 (US/United States/199.2.138.34.bc.googleusercontent.c ...
show more
(cpanel) Failed cPanel login from 34.138.2.199 (US/United States/199.2.138.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-10-01 17:00:25 -0400] info [cpaneld] 34.138.2.199 - - "GET /kotau59r0gsrfkyv78ur HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-01 17:00:27 -0400] info [cpaneld] 34.138.2.199 - - "GET /model/info HTTP/1.1" FAILED LOGIN cpaneld: Authorization: type not known
[2026-10-01 17:00:28 -0400] info [cpaneld] 34.138.2.199 - - "POST /graphql HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-01 17:00:28 -0400] info [cpaneld] 34.138.2.199 - - "GET /__/firebase/init.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
[2026-10-01 17:00:28 -0400] info [cpaneld] 34.138.2.199 - - "GET /config.json HTTP/1.1" FAILED LOGIN cpaneld: login attempt without username
show less
Brute-Force
SSH
πΈπ¬
simpeg-adm.bandung.go.id
2026-10-01 20:38:29
(3 weeks ago)
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/80bv7zfyskvwd72sgjdj"
01/Oct/2026:20:38:29 +0000;34.138.2. ...
show more
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/80bv7zfyskvwd72sgjdj"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/gbaw0979s1bt794w3a7w"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/z9x8c7v6b5-debug-trigger-vendors.brennamariephoto.com"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/dist/manifest.json"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/.vite/manifest.json"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/dist/.vite/manifest.json"
01/Oct/2026:20:38:29 +0000;34.138.2.199;"/lib/terminal-xhr.php"
...
show less
Web Spam
Brute-Force
Web App Attack