๐ณ๐ฑ
oisecnet
2026-10-11 21:02:04
(1 day ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-11. 279 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-11. 279 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐ฉ๐ช
Marco711
2026-10-11 11:29:51
(1 day ago)
CrowdSec: crowdsecurity/http-sensitive-files
Web App Attack
๐ฉ๐ช
Skyrider
2026-10-11 10:26:22
(1 day ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-11 10:21:26
(1 day ago)
[backup01al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. E ...
show more
[backup01al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.138.226.105 - - [11/Oct/2026:12:21:22 +0200] "GET /.aws/config HTTP/2.0" 404 1854 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-11 08:28:50
(2 days ago)
577 requests with url.path *.env
147 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-11 08:16:38
(2 days ago)
2026/10/11 09:16:36 [error] 4060693#4060693: *2108625 access forbidden by rule, client: 34.138.226.1 ...
show more
2026/10/11 09:16:36 [error] 4060693#4060693: *2108625 access forbidden by rule, client: 34.138.226.105, server: [redacted], request: "GET /_nuxt/../.env HTTP/2.0", host: "[redacted]"
2026/10/11 09:16:36 [error] 4060693#4060693: *2108625 access forbidden by rule, client: 34.138.226.105, server: [redacted], request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "[redacted]"
2026/10/11 09:16:36 [error] 4060693#4060693: *2108625 access forbidden by rule, client: 34.138.226.105, server: [redacted], request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "[redacted]"
show less
Brute-Force
Web App Attack
๐บ๐ธ
Charlesiv
2026-10-11 08:01:57
(2 days ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Prot ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /web/.env
Timestamp: 2026-10-11T06:44:57Z
Ray ID: a48be632afaaadcc
UA: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
show less
Bad Web Bot
๐ฉ๐ช
Marco711
2026-10-11 07:20:37
(2 days ago)
port/URL scanning
Port Scan
Web App Attack
๐ฉ๐ช
jasperedv.de
2026-10-11 06:49:54
(2 days ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
๐ฉ๐ช
raph
2026-10-11 06:34:55
(2 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-10-11 06:25:43
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ฎ๐ฉ
Burayot
2026-10-11 06:25:23
(2 days ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.138.226.105 (US/United States/105 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.138.226.105 (US/United States/105.226.138.34.bc.googleusercontent.com): 2 in the last 3600 secs
show less
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-11 05:40:40
(2 days ago)
Sensitive File Scan
Web App Attack
๐ซ๐ท
guillaume illien
2026-10-11 04:21:24
(2 days ago)
34.138.226.105 - - [11/Oct/2026:04:21:23 +0000] "GET /assets/timmy/controllers/application-48e8b4d3d ...
show more
34.138.226.105 - - [11/Oct/2026:04:21:23 +0000] "GET /assets/timmy/controllers/application-48e8b4d3dfcce7f7f8225f64dfd4717ff1874643325602d9eed09ad17b95cb76.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.138.226.105 - - [11/Oct/2026:04:21:23 +0000] "GET /assets/worders_core/vendors/frappe-gantt.min-a5506a4af4f72a724ee1d72260f207ae954d54d9b7915a97f9ab19f6b289a67d.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.138.226.105 - - [11/Oct/2026:04:21:23 +0000] "GET /assets/worders_core/controllers/session_new_controller-bf394b75732ceffdd392dc713e6ef4135d1d9ed5baae0185e0ab959a67f45131.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.138.226.105 - - [11/Oct/2026:04:21:23 +0000] "GET /assets/production/appli
...
show less
Hacking
Brute-Force
Web App Attack
SSH
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-11 03:43:01
(2 days ago)
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/z9x8c7v6b5-debug-trigger-app.marcossanchez.net"
11/Oct/2 ...
show more
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/z9x8c7v6b5-debug-trigger-app.marcossanchez.net"
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/dist/.vite/manifest.json"
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/.vite/manifest.json"
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/6wu2vvgoss51fn2sbezp"
11/Oct/2026:03:43:00 +0000;34.138.226.105;"/dist/manifest.json"
11/Oct/2026:03:43:01 +0000;34.138.226.105;"/qw6mbf3sjq7cyx8589ti"
11/Oct/2026:03:43:01 +0000;34.138.226.105;"/js/-Da0dNnwY.js"
...
show less
Web Spam
Brute-Force
Web App Attack