🇳🇱
oisecnet
2026-09-19 21:01:16
UTC ·
(1 month ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-19. 84 requests from this IP.
Port Scan
Hacking
Web App Attack
🇺🇸
Charlesiv
2026-09-19 18:01:46
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.swp
Timestamp: 2026-09-19T12:31:05Z
Ray ID: a3d89afd1b3aab71
UA: Mozilla/5.0 (compatible; MoonshotBot/1.0; + ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /.env.swp
Timestamp: 2026-09-19T12:31:05Z
Ray ID: a3d89afd1b3aab71
UA: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)
show less
Bad Web Bot
🇮🇩
Burayot
2026-09-19 12:49:31
UTC ·
(1 month ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.173.92.71 (US/United States/71.92.173.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇺🇸
valornode
2026-09-19 12:39:31
UTC ·
(1 month ago)
Detected by CrowdSec on www.iambrayden.net-47d88224: CrowdSec: crowdsecurity/http-bad-user-agent | ASN: 396982 (GOOGLE-CLOUD-PLATFORM) | Country: US | Range: 34.160.0.0/12
Brute-Force
SSH
🇳🇱
Savvii
2026-09-19 12:33:16
UTC ·
(1 month ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
itsolon
2026-09-19 12:18:57
UTC ·
(1 month ago)
[19/Sep/2026:14:18:57 +0200] 178982033778.985729 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033776.283525 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033740.758913 34.173.92.71 52916 217.154.7. ...
show more
[19/Sep/2026:14:18:57 +0200] 178982033778.985729 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033776.283525 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033740.758913 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033749.757858 34.173.92.71 52916 217.154.7.177 443
[19/Sep/2026:14:18:57 +0200] 178982033786.249400 34.173.92.71 52916 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-19 11:53:04
UTC ·
(1 month ago)
2026/09/19 12:53:02 [error] 325888#325888: *461749 access forbidden by rule, client: 34.173.92.71, server: webapp.gwynethllewelyn.net, request: "GET /media../.env HTTP/2.0", host: "webapp.gwynethllewelyn.net"
2026/09/19 12:53:02 [error] 325888#325888 ...
show more
2026/09/19 12:53:02 [error] 325888#325888: *461749 access forbidden by rule, client: 34.173.92.71, server: webapp.gwynethllewelyn.net, request: "GET /media../.env HTTP/2.0", host: "webapp.gwynethllewelyn.net"
2026/09/19 12:53:02 [error] 325888#325888: *461749 access forbidden by rule, client: 34.173.92.71, server: webapp.gwynethllewelyn.net, request: "GET /_nuxt/../.env HTTP/2.0", host: "webapp.gwynethllewelyn.net"
2026/09/19 12:53:02 [error] 325888#325888: *461749 access forbidden by rule, client: 34.173.92.71, server: webapp.gwynethllewelyn.net, request: "GET /files../.env HTTP/2.0", host: "webapp.gwynethllewelyn.net"
show less
Brute-Force
Web App Attack
Anonymous
2026-09-19 10:07:48
UTC ·
(1 month ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
🇺🇸
Charlesiv
2026-09-19 10:05:29
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-09-19T03:24:50Z
Ray ID: a3d57ad2594c0ea2
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; ...
show more
Triggered Cloudflare WAF (firewallManaged) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /
Timestamp: 2026-09-19T03:24:50Z
Ray ID: a3d57ad2594c0ea2
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )
show less
Bad Web Bot
🇬🇧
Andrew
2026-09-19 09:24:25
UTC ·
(1 month ago)
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] "GET /admin%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] ...
show more
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] "GET /admin%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] "GET /settings%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot)"
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] "GET /dashboard%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.173.92.71 - - [19/Sep/2026:10:24:08 +0100] "GET /api%2F.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
34.173.92.71 - - [19/Sep/2026:10:24:09 +0100] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 404 491 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.173.92.71 - - [19/Sep/2026:10:24:24 +0100] "POST /lib/terminal-xhr.php H
...
show less
Hacking
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-19 08:22:42
UTC ·
(1 month ago)
2026/09/19 09:22:39 [error] 325888#325888: *416678 access forbidden by rule, client: 34.173.92.71, server: [redacted], request: "GET /common/.env HTTP/2.0", host: "smtp.gwynethllewelyn.net"
2026/09/19 09:22:40 [error] 325888#325888: *416704 access fo ...
show more
2026/09/19 09:22:39 [error] 325888#325888: *416678 access forbidden by rule, client: 34.173.92.71, server: [redacted], request: "GET /common/.env HTTP/2.0", host: "smtp.gwynethllewelyn.net"
2026/09/19 09:22:40 [error] 325888#325888: *416704 access forbidden by rule, client: 34.173.92.71, server: [redacted], request: "GET /.env HTTP/2.0", host: "smtp.gwynethllewelyn.net"
34.173.92.71 - - [19/Sep/2026:09:22:40 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
show less
Brute-Force
Web App Attack
🇩🇪
Michel Wijnberg
2026-09-19 06:02:42
UTC ·
(1 month ago)
34.173.92.71 - - [19/Sep/2026:06:02:41 +0000] "GET /@fs/../.env?raw?? HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
Bad Web Bot
Web App Attack
🇺🇸
Charlesiv
2026-09-19 03:02:57
UTC ·
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /env.bak
Timestamp: 2026-09-18T22:26:47Z
Ray ID: a3d3c6345897eac0
UA: Mozilla/5.0 (compatible; Bravebot/1.0; +http ...
show more
Triggered Cloudflare WAF (firewallCustom) from US.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /env.bak
Timestamp: 2026-09-18T22:26:47Z
Ray ID: a3d3c6345897eac0
UA: Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)
show less
Bad Web Bot
🇪🇸
masterguru
2026-09-19 02:17:36
UTC ·
(1 month ago)
BAD BOT - Detected and Blocked.. Matched phrase "amazonbot" at REQUEST_HEADERS:user-agent. (1100000-122)
Bad Web Bot
Anonymous
2026-09-19 01:45:23
UTC ·
(1 month ago)
General vulnerability scan
Web App Attack