🇪🇸
librebit
2026-09-12 10:18:52
(1 hour ago)
Bad guys doing bad things, bad crawling
Bad Web Bot
🇫🇷
a.mohamed.go
2026-09-12 07:56:23
(3 hours ago)
34.156.239.146 - - [12/Sep/2026:07:56:23 +0000] "GET /static../etc/passwd HTTP/1.1" 200 10092 "-" "M ...
show more
34.156.239.146 - - [12/Sep/2026:07:56:23 +0000] "GET /static../etc/passwd HTTP/1.1" 200 10092 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user) Chrome/120.0.1949.172 Safari/537.36"
...
show less
Hacking
Web App Attack
🇧🇾
lns.bz
2026-09-12 07:53:57
(3 hours ago)
.env scanning [BY]
Web App Attack
Anonymous
2026-09-12 07:40:45
(4 hours ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.156.239.146 (BE/Belgium/146.239.156.34.bc ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 34.156.239.146 (BE/Belgium/146.239.156.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.156.239.146 - - [12/Sep/2026:09:40:41 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 406 991 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.2 Mobile/15E148 Safari/604.1; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot"
34.156.239.146 - - [12/Sep/2026:09:40:41 +0200] "GET /media../.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.4; +https://openai.com/gptbot) Chrome/151.0.3539.109 Safari/537.36"
34.156.239.146 - - [12/Sep/2026:09:40:41 +0200] "GET /.env.local HTTP/1.1" 406 991 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0; compatible; Applebot/0.1; +http://www.apple.com/go/applebot"
show less
Port Scan
🇮🇹
CoreTech srl
2026-09-12 03:58:38
(7 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇺🇸
JL41414141
2026-09-12 01:09:55
(10 hours ago)
34.156.239.146 - - [12/Sep/2026:01:09:54 +0000] "GET /__aws_leak_probe_0ea6cc69__ HTTP/1.1" 404 181 ...
show more
34.156.239.146 - - [12/Sep/2026:01:09:54 +0000] "GET /__aws_leak_probe_0ea6cc69__ HTTP/1.1" 404 181 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko; compatible; meta-externalagent/1.1; +https://developers.facebook.com/docs/sharing/webmasters/crawler) Chrome/130.0.3303.190 Mobile Safari/537.36"
34.156.239.146 - - [12/Sep/2026:01:09:54 +0000] "GET /static../.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.2; +https://openai.com/gptbot)"
...
show less
Web Spam
🇩🇪
Hans Wurst
2026-09-11 21:52:05
(14 hours ago)
Many 404-Error: Suspicion of URL-Fuzzing/Bot-Scan.
Web App Attack
🇹🇷
Detmach
2026-09-11 21:00:03
(14 hours ago)
Security attack detected. Multiple failed attempts from 34.156.239.146. IP banned for 1440 minutes a ...
show more
Security attack detected. Multiple failed attempts from 34.156.239.146. IP banned for 1440 minutes at 12.09.2026 00:00:03. Failed attempts: 1
show less
Brute-Force
🇮🇪
AutosOnShow
2026-09-11 16:47:05
(19 hours ago)
blocked for webapp attack | path requested: / | seen at 2026-09-11 16:46:49.279 |
Web App Attack
🇧🇷
SOC Blue Team
2026-09-11 13:54:58
(21 hours ago)
Tatic: TA0006 | Technique: T1110 | Source: TAP | Country Destination: BR
Brute-Force
🇺🇸
NXTwoThou
2026-09-11 12:21:12
(23 hours ago)
174.78
Web App Attack
🇺🇸
jormaster3k
2026-09-10 21:03:50
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇬🇧
Celtic
2026-09-10 13:35:05
(1 day ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
🇩🇪
spirttm
2026-09-10 12:09:38
(1 day ago)
34.156.239.146 - - [10/Sep/2026:12:09:36 +0000] "GET / HTTP/1.1" 403 186 "-" "Mozilla/5.0 (iPhone; C ...
show more
34.156.239.146 - - [10/Sep/2026:12:09:36 +0000] "GET / HTTP/1.1" 403 186 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.3657.19 Mobile Safari/537.36; compatible; GPTBot/1.2; +https://openai.com/gptbot"
34.156.239.146 - - [10/Sep/2026:12:09:37 +0000] "GET /__aws_leak_probe_dc9ec818__ HTTP/1.1" 403 125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.4 Safari/605.1.15; compatible; TelegramBot/1.0"
34.156.239.146 - - [10/Sep/2026:12:09:37 +0000] "GET /static../.env HTTP/1.1" 403 186 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.8606.5 Safari/537.36; compatible; GrokBot/1.0; +https://x.ai/grokbot"
34.156.239.146 - - [10/Sep/2026:12:09:37 +0000] "GET /media../.env HTTP/1.1" 403 125 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.15
...
show less
Port Scan
Web App Attack
🇺🇸
MPL
2026-09-10 09:59:11
(2 days ago)
tcp port scan (8 or more attempts)
Port Scan