Anonymous
2026-10-16 17:45:02
(1 week ago)
suspicious request in access.log
Web App Attack
๐ง๐ท
dermatovirtual
2026-10-16 15:47:04
(1 week ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 3 unauthorized requests recorded between 2026-10-16 15:45:25 UTC and 2026-10-16 15:45:25 UTC (rate: ~3 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-16 15:45:25 UTC] IP: 34.151.173.193 - W3C IIS (Port 443): GET /v3/.env -> HTTP 404 [CLIENT: 34.151.173.193]
[2026-10-16 15:45:25 UTC] IP: 34.151.173.193 - W3C IIS (Port 443): GET /api/v1/.env -> HTTP 404 [CLIENT: 34.151.173.193]
[2026-10-16 15:45:25 UTC] IP: 34.151.173.193 - W3C IIS (Port 443): GET /api/v2/.env -> HTTP 404 [CLIENT: 34.151.173.193]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-16 14:35:13
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฒ๐ฝ
impra
2026-10-16 12:53:35
(1 week ago)
Detected 10 connection attempts.
Port Scan
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-16 12:11:14
(1 week ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.151.173.193 - - [16/Oct/2026:14:10:59 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฏ๐ต
amyriad
2026-10-16 11:22:25
(1 week ago)
34.151.173.193 - - [16/Oct/2026:20:22:24 +0900] "GET /.env HTTP/1.1" 404 514 "-" "Mozilla/5.0 (X11; ...
show more
34.151.173.193 - - [16/Oct/2026:20:22:24 +0900] "GET /.env HTTP/1.1" 404 514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.173.193 - - [16/Oct/2026:20:22:24 +0900] "GET /.env.local HTTP/1.1" 404 514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.173.193 - - [16/Oct/2026:20:22:24 +0900] "GET /.env.production HTTP/1.1" 404 514 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Hacking
Brute-Force
๐ณ๐ฑ
Site.eu
2026-10-16 09:47:38
(1 week ago)
Excessive 404/403 errors
Brute-Force
๐ฏ๐ต
amyriad
2026-10-16 08:01:43
(1 week ago)
34.151.173.193 - - [16/Oct/2026:08:01:42 +0000] "GET /.env HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Macin ...
show more
34.151.173.193 - - [16/Oct/2026:08:01:42 +0000] "GET /.env HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.173.193 - - [16/Oct/2026:08:01:42 +0000] "GET /.env.local HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.151.173.193 - - [16/Oct/2026:08:01:43 +0000] "GET /.env.production HTTP/1.1" 404 514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Hacking
Brute-Force
๐จ๐ญ
zynex
2026-10-16 07:11:06
(1 week ago)
CrowdSec crowdsecurity/http-technology-probing
Web App Attack
๐ฉ๐ช
zumbo.net
2026-10-16 07:01:14
(1 week ago)
[Fri Oct 16 10:01:12.491603 2026] [proxy_fcgi:error] [pid 2950017:tid 2950040] [client 34.151.173.19 ...
show more
[Fri Oct 16 10:01:12.491603 2026] [proxy_fcgi:error] [pid 2950017:tid 2950040] [client 34.151.173.193:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 10:01:12.811482 2026] [proxy_fcgi:error] [pid 2950017:tid 2950021] [client 34.151.173.193:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 10:01:13.130410 2026] [proxy_fcgi:error] [pid 2950017:tid 2950045] [client 34.151.173.193:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 10:01:13.451983 2026] [proxy_fcgi:error] [pid 2950018:tid 2950071] [client 34.151.173.193:0] AH01071: Got error 'Primary script unknown'
[Fri Oct 16 10:01:13.771223 2026] [proxy_fcgi:error] [pid 2950018:tid 2950069] [client 34.151.173.193:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-10-16 03:00:12
(1 week ago)
| [Dangerous/Australia] Aggressive IP 34.151.173.193 (~30 hits). Type: DoS Defender- Web server 400 ...
show more
| [Dangerous/Australia] Aggressive IP 34.151.173.193 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection