๐ฉ๐ช
yitzhaq
2026-10-12 22:36:29
(2 days ago)
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /proc/self/cmdline HTTP/2.0" 404 305 "-" "Mozill ...
show more
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /proc/self/cmdline HTTP/2.0" 404 305 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /api/system/fileView?file=/app/.env HTTP/2.0" 404 305 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /app/.env HTTP/2.0" 404 305 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /gcp-service.json HTTP/2.0" 403 308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email])"
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /secrets.env HTTP/2.0" 403 308 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.139.170.14 - - [13/Oct/2026:00:36:26 +0200] "GET /.dockerenv HTTP/2.0" 404 305 "-" "Mozill
show less
Web App Attack
Hacking
๐บ๐ธ
ALSCOยฎ๏ธ
2026-10-12 22:00:23
(2 days ago)
Report By ALSCO Security Team: XSS Injection Attempt Detected
Web App Attack
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-10-12 22:00:22
(2 days ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Hacking
๐ฎ๐น
Progetto1
2026-10-12 21:30:04
(2 days ago)
Multiple exploit attempts
Hacking
Brute-Force
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 16:14:14
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:14:08.352322 2026] [security2:error] [pid 25185:tid 25185] [client 34.139.170.14:49700] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.james.ahlstrom.name"] [uri "/static//.env"] [unique_id "as0HUKYMPzDdnT6gaV3rQQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
oja
2026-10-12 14:32:28
(3 days ago)
Aggressive web scanner
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 13:58:53
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:58:42.399021 2026] [security2:error] [pid 32087:tid 32087] [client 34.139.170.14:40670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.mike.bickley.name"] [uri "/assets../.env"] [unique_id "asznkrV3zSIxFIkQxaRnJQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฏ๐ต
amyriad
2026-10-12 13:33:24
(3 days ago)
34.139.170.14 - - [12/Oct/2026:22:33:24 +0900] "GET /js../.env HTTP/1.1" 404 459 "-" "Mozilla/5.0 (c ...
show more
34.139.170.14 - - [12/Oct/2026:22:33:24 +0900] "GET /js../.env HTTP/1.1" 404 459 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.139.170.14 - - [12/Oct/2026:22:33:24 +0900] "GET /....//....//....//..../.env HTTP/1.1" 404 459 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.139.170.14 - - [12/Oct/2026:22:33:24 +0900] "GET /files../.env HTTP/1.1" 404 459 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
DDoS Attack
Hacking
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-12 12:28:42
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.170.14 (14.170.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 08:28:36.355162 2026] [security2:error] [pid 26512:tid 26512] [client 34.139.170.14:43902] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "stufflebeam.name"] [uri "/dist../.env"] [unique_id "aszSdJHCr7HdVmn1ngjEhwAAAEM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-12 11:34:47
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-10-12 11:24:10
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฎ๐น
VHosting
2026-10-12 11:00:11
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
svr
2026-10-12 10:40:23
(3 days ago)
HC-Flood Web Scanner
Web App Attack
Anonymous
2026-10-12 10:37:45
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-12 10:32:05
(3 days ago)
34.139.170.14 - - [12/Oct/2026:10:32:05 +0000] "GET /.env?import&url&inline HTTP/2.0" 404 685 "-" "M ...
show more
34.139.170.14 - - [12/Oct/2026:10:32:05 +0000] "GET /.env?import&url&inline HTTP/2.0" 404 685 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack