๐ฉ๐ช
rh24
2026-09-17 03:19:58
(18 hours ago)
(badbots) Bad bot user-agent [redacted] from 34.14.163.161 (IN/India/161.163.14.34.bc.googleusercont ...
show more
(badbots) Bad bot user-agent [redacted] from 34.14.163.161 (IN/India/161.163.14.34.bc.googleusercontent.com)
show less
Hacking
Anonymous
2026-09-17 03:00:59
(18 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-17 02:48:12
(18 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_server_contact
Hacking
๐ณ๐ฑ
Alt255
2026-09-17 02:46:49
(18 hours ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.163.161 - - [17/Sep/2026:04:46:28 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 404 7869 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Bad Web Bot
Web App Attack
๐ง๐พ
lns.bz
2026-09-17 02:43:53
(18 hours ago)
Too many 404 requests [BY]
Web App Attack
๐บ๐ธ
deskpass.com
2026-09-17 02:39:12
(18 hours ago)
POST /icecoder/lib/terminal-xhr.php
Web App Attack
๐ณ๐ด
Abuse Buster
2026-09-17 01:54:04
(19 hours ago)
34.14.163.161 - - [17/Sep/2026:03:54:03 +0200] "GET /.env.old HTTP/2.0" 404 22 "-" "Mozilla/5.0 (com ...
show more
34.14.163.161 - - [17/Sep/2026:03:54:03 +0200] "GET /.env.old HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.14.163.161 - - [17/Sep/2026:03:54:03 +0200] "GET /wp-json HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.14.163.161 - - [17/Sep/2026:03:54:03 +0200] "GET /.aws/config HTTP/2.0" 404 22 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-09-17 00:37:17
(20 hours ago)
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /api%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 ( ...
show more
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /api%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "-" edge="34.14.163.161"
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /dashboard%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "-" edge="34.14.163.161"
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /dashboard%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)" "-" edge="34.14.163.161"
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /admin%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="34.14.163.161"
34.14.163.161 - - [17/Sep/2026:00:36:33 +0000] "GET /admin%2F.env HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="3
...
show less
Web App Attack
๐ซ๐ท
guillaume illien
2026-09-17 00:35:37
(20 hours ago)
34.14.163.161 - - [17/Sep/2026:00:35:33 +0000] "GET /..%2f.env HTTP/1.1" 400 166 "-" "-"
34.14.163.1 ...
show more
34.14.163.161 - - [17/Sep/2026:00:35:33 +0000] "GET /..%2f.env HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:34 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:34 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:36 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:37 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:37 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 166 "-" "-"
34.14.163.161 - - [17/Sep/2026:00:35:37 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 166 "-" "-"
...
show less
Hacking
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
OrangeFlamingo
2026-09-17 00:27:07
(20 hours ago)
2026-09-17 00:27:07 WARN Probe detected: uri=/api/static/home/user/.env ip=34.14.163.161
...
Web App Attack
Anonymous
2026-09-16 23:31:11
(21 hours ago)
Scan for .env Files at 2026-09-16T23:31:11+00:00
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-16 23:04:59
(22 hours ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.14.163.161 - - [17/Sep/2026:01:04:58 +0200] "GET /css../.env HTTP/1.1" 404 2085 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
TheDjRider
2026-09-16 23:02:16
(22 hours ago)
CrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths ...
show more
CrowdSec detected Sensitive file or backup discovery attempt. Scenario: local/apache-sensitive-paths. Automatic ban triggered. Detection time (UTC): 2026-09-16T23:02:14.119692286Z. Context: http_status=404
show less
Hacking
Web App Attack
๐บ๐ธ
deskpass.com
2026-09-16 22:56:18
(22 hours ago)
POST /lib/terminal-xhr.php
Web App Attack
๐บ๐ธ
gamabe
2026-09-16 22:40:48
(22 hours ago)
Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.
Hacking