Anonymous
2026-09-05 23:44:06
(3 hours ago)
[Sat Sep 05 20:43:09.794884 2026] [core:error] [pid 1036270] [client 34.153.212.171:39258] AH10244: ...
show more
[Sat Sep 05 20:43:09.794884 2026] [core:error] [pid 1036270] [client 34.153.212.171:39258] AH10244: invalid URI path (/assets../../../etc/passwd)
[Sat Sep 05 20:43:12.702114 2026] [core:error] [pid 1120878] [client 34.153.212.171:39270] AH10244: invalid URI path (/assets../../../.env)
[Sat Sep 05 20:43:20.588801 2026] [core:error] [pid 1120963] [client 34.153.212.171:40238] AH10244: invalid URI path (////../.env)
[Sat Sep 05 20:43:20.591824 2026] [core:error] [pid 1120882] [client 34.153.212.171:40328] AH10244: invalid URI path (/%2e%2e/%2e%2e/.env)
[Sat Sep 05 20:43:34.020329 2026] [core:error] [pid 1120893] [client 34.153.212.171:24562] AH10244: invalid URI path (/assets../../../etc/passwd)
[Sat Sep 05 20:43:36.748521 2026] [core:error] [pid 1120892] [client 34.153.212.171:24530] AH10244: invalid URI path (/assets../../../.env)
[Sat Sep 05 20:43:51.379574 2026] [core:error] [pid 1120873] [client 34.153.212.171:51384] AH10244: invalid URI path (/%2e%2e/%2e%2e/.env)
[Sat Sep 05 20:43:5
...
show less
Web App Attack
Anonymous
2026-09-05 15:50:41
(11 hours ago)
[Sat Sep 05 17:50:37.388871 2026] [proxy_fcgi:error] [pid 59768:tid 59809] [client 34.153.212.171:53 ...
show more
[Sat Sep 05 17:50:37.388871 2026] [proxy_fcgi:error] [pid 59768:tid 59809] [client 34.153.212.171:53388] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 17:50:39.624589 2026] [proxy_fcgi:error] [pid 4549:tid 4597] [client 34.153.212.171:53402] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 17:50:39.732581 2026] [proxy_fcgi:error] [pid 59768:tid 59807] [client 34.153.212.171:53256] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 17:50:40.504977 2026] [proxy_fcgi:error] [pid 4372:tid 4498] [client 34.153.212.171:53320] AH01071: Got error 'Primary script unknown'
[Sat Sep 05 17:50:40.509423 2026] [proxy_fcgi:error] [pid 59768:tid 59810] [client 34.153.212.171:53242] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇧🇪
sid3windr
2026-09-05 10:24:13
(16 hours ago)
GET /.git/HEAD (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇳🇱
i-turnradio.nl
2026-09-05 07:25:03
(19 hours ago)
2026-09-05 @ 09:25:02 (CET) ~ Blocked for trying to access: /static../.env
Web App Attack
🇩🇪
Uwe Sarpe
2026-09-05 07:07:41
(20 hours ago)
[Sat Sep 05 09:07:40.662070 2026] [access_compat:error] [pid 281902:tid 281902] [client 34.153.212.1 ...
show more
[Sat Sep 05 09:07:40.662070 2026] [access_compat:error] [pid 281902:tid 281902] [client 34.153.212.171:48646] AH01797: client denied by server configuration: /var/www/__aws_leak_probe_c734859a__
[Sat Sep 05 09:07:40.905692 2026] [access_compat:error] [pid 281902:tid 281902] [client 34.153.212.171:48646] AH01797: client denied by server configuration: /var/www/static..
[Sat Sep 05 09:07:41.149254 2026] [access_compat:error] [pid 281902:tid 281902] [client 34.153.212.171:48646] AH01797: client denied by server configuration: /var/www/media..
[Sat Sep 05 09:07:41.392871 2026] [access_compat:error] [pid 281902:tid 281902] [client 34.153.212.171:48646] AH01797: client denied by server configuration: /var/www/@fs
[Sat Sep 05 09:07:41.393000 2026] [access_compat:error] [pid 281909:tid 281909] [client 34.153.212.171:48784] AH01797: client denied by server configuration: /var/www/static..
...
show less
Brute-Force
Web App Attack
🇫🇷
Sebbabas
2026-09-04 10:07:30
(1 day ago)
wigs.ddns.net:443 34.153.212.171 - - \[04/Sep/2026:12:07:29 +0200\] "GET /static../.env HTTP/1.1" 40 ...
show more
wigs.ddns.net:443 34.153.212.171 - - \[04/Sep/2026:12:07:29 +0200\] "GET /static../.env HTTP/1.1" 403 1440 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 13_6_7\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/17.2 Safari/605.1.15\; compatible\; OAI-SearchBot/1.3\; +https://openai.com/searchbot"wigs.ddns.net:443 34.153.212.171 - - \[04/Sep/2026:12:07:29 +0200\] "GET /media../.env HTTP/1.1" 403 1440 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10.15\; rv:150.4\) Gecko/20100101 Firefox/150.4\; compatible\; GrokBot/1.0\; +https://x.ai/grokbot"wigs.ddns.net:443 34.153.212.171 - - \[04/Sep/2026:12:07:30 +0200\] "GET /static../.aws/credentials HTTP/1.1" 403 1577 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; WhatsApp/10.0.2.1\)"wigs.ddns.net:443 34.153.212.171 - - \[04/Sep/2026:12:07:30 +0200\] "GET /files../etc/passwd HTTP/1.1" 403 1577 "-" "Mozilla/5.0 \(compatible\; facebookexternalhit/1.1\; +http://www.facebook.com/externalhit_uatext.php\)"
...
show less
FTP Brute-Force
Port Scan
Brute-Force
Web App Attack
SSH
🇺🇸
stvnrdg.me
2026-09-04 06:11:26
(1 day ago)
34.153.212.171 - - [04/Sep/2026:06:11:26 +0000] "GET /.env.php HTTP/1.1" 404 396 "-" "Mozilla/5.0 Ap ...
show more
34.153.212.171 - - [04/Sep/2026:06:11:26 +0000] "GET /.env.php HTTP/1.1" 404 396 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot"
...
show less
Hacking
🇺🇸
Floofie
2026-09-04 04:26:19
(1 day ago)
34.153.212.171 - - [04/Sep/2026:00:26:17 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/ ...
show more
34.153.212.171 - - [04/Sep/2026:00:26:17 -0400] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.153.212.171 - - [04/Sep/2026:00:26:18 -0400] "GET /__aws_leak_probe_b0c7755b__ HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Twitterbot/1.0)"
34.153.212.171 - - [04/Sep/2026:00:26:19 -0400] "GET /static../.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-09-04 04:10:50
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇿
Antinson
2026-09-03 20:52:23
(2 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇺🇸
MPL
2026-09-03 11:42:12
(2 days ago)
tcp port scan (16 or more attempts)
Port Scan
🇮🇹
CoreTech srl
2026-09-03 06:03:14
(2 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇺🇸
RAP
2026-09-03 03:58:37
(2 days ago)
2026-09-03 03:58:37 UTC Unauthorized activity to TCP port 8443. Web App
Port Scan
Web App Attack
Anonymous
2026-09-03 02:29:51
(3 days ago)
Portscan: TCP/8443, TCP/80, TCP/8080, TCP/443, TCP/9443, TCP/5173, TCP/9000, TCP/3000, TCP/9090, TCP ...
show more
Portscan: TCP/8443, TCP/80, TCP/8080, TCP/443, TCP/9443, TCP/5173, TCP/9000, TCP/3000, TCP/9090, TCP/2376, TCP/8888, TCP/8000, TCP/2375, TCP/5000, TCP/8081
show less
Port Scan
Anonymous
2026-09-03 00:03:52
(3 days ago)
PORT & IP Scan.
Port Scan
Brute-Force