🇫🇷
GabrielJST
2026-10-27 02:51:13
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.141.30.230 (DE/Germany/230.30.141.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.141.30.230 (DE/Germany/230.30.141.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇬🇧
andypiper
2026-10-27 02:01:01
(2 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
macrob
2026-10-27 01:15:03
(3 hours ago)
2026/10/27 01:15:01 [error] 2286324#2286324: *14569012 access forbidden by rule, client: 34.141.30.2 ...
show more
2026/10/27 01:15:01 [error] 2286324#2286324: *14569012 access forbidden by rule, client: 34.141.30.230, server: behemoti.com, request: "GET /@fs/../.env?import&raw?? HTTP/2.0", host: "behemoti.com"
2026/10/27 01:15:02 [error] 2286326#2286326: *14569077 access forbidden by rule, client: 34.141.30.230, server: behemoti.com, request: "GET /@fs/app/.env.production?import&raw?? HTTP/2.0", host: "behemoti.com"
2026/10/27 01:15:02 [error] 2286326#2286326: *14569077 access forbidden by rule, client: 34.141.30.230, server: behemoti.com, request: "GET /.env.development?raw HTTP/2.0", host: "behemoti.com"
...
show less
Web App Attack
2026-10-26 22:14:48
(6 hours ago)
PSCSERV WPSCAN 34.141.30.230
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-26 20:00:32
(8 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇳🇱
Alt255
2026-10-26 18:41:53
(9 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.141.30.230 - - [26/Oct/2026:19:41:50 +0100] "GET /.htpasswd HTTP/2.0" 403 1858 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-10-26 18:39:34
(10 hours ago)
Excessive crawling of non-existent URLs
Bad Web Bot
🇳🇱
e.fierstra
2026-10-26 18:29:06
(10 hours ago)
excessive HTTP 404 errors
Bad Web Bot
2026-10-26 14:11:49
(14 hours ago)
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env.production::$DATA?raw HTTP/1.1" 403 199 "- ...
show more
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env.production::$DATA?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.141.30.230
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env.development::$DATA?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" 34.141.30.230
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env.development?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot" 34.141.30.230
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env::$DATA?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.141.30.230
34.141.30.230 - - [25/Oct/2026:16:33:38 -0500] "GET /.env?.svg?.wasm?init HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmast
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-10-26 06:06:01
(22 hours ago)
2026-10-26 07:04:19 GET /docker/.env [404] && 2026-10-26 07:04:19 GET /web/.env [404] && 2026-10-26 ...
show more
2026-10-26 07:04:19 GET /docker/.env [404] && 2026-10-26 07:04:19 GET /web/.env [404] && 2026-10-26 07:04:19 GET /src/.env [404] && 205 more within 20 minutes
show less
Web App Attack
🇺🇸
deskpass.com
2026-10-26 06:05:22
(22 hours ago)
GET /document.php
Web App Attack
🇨🇦
SSH-Admin
2026-10-26 04:00:16
(1 day ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇺🇸
gbutiri
2026-10-26 03:41:05
(1 day ago)
Blocked at our Cloudflare edge for probing '/_next/server' (path/extension we do not serve). (report ...
show more
Blocked at our Cloudflare edge for probing '/_next/server' (path/extension we do not serve). (reported by agent cf-watcher)
show less
Web App Attack
Bad Web Bot
🇫🇮
paissangroup
2026-10-26 00:41:15
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
Blamdom
2026-10-26 00:26:09
(1 day ago)
Secret/config-file recon: requested /img../.env. 456 HTTP request(s), 2026-10-26 00:26:09 to 00:26:2 ...
show more
Secret/config-file recon: requested /img../.env. 456 HTTP request(s), 2026-10-26 00:26:09 to 00:26:29 UTC (20s).
Requests (method path -> status xcount):
GET [site page] -> 404 x197
GET /wp-includes/... -> 304 x32
GET /wp-includes/... -> 404 x32
GET /api/... -> 404 x13
GET /wp-content/... -> 200 x12
GET /wp-content/... -> 404 x12
GET [site page] -> 200 x7
GET [site page] -> 302 x4
...+140 more distinct requests
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 (+32 other UAs)
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack