๐ณ๐ฑ
Savvii
2026-10-26 18:52:59
(44 minutes ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
konseptit
2026-10-26 14:14:13
(5 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.178.206.183 (183.206.178.34.bc.googl ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.178.206.183 (183.206.178.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
Epimetheus
2026-10-26 13:41:01
(5 hours ago)
Zombie network / Bot scanner detected:
[POST] /actions
[POST] /dashboard
[GET] /model/.env
[POST] / ...
show more
Zombie network / Bot scanner detected:
[POST] /actions
[POST] /dashboard
[GET] /model/.env
[POST] /api
[GET] /.git/config
[GET] /.git-credentials
[POST] /api
[GET] /.aws/credentials
[GET] /.aws/config
[GET] /.git/HEAD
[GET] /.env.old
[GET] /proc/self/cgroup
[GET] /userfiles
[GET] /%2eenv
[GET] /cache/original/%2e%2e/%2e%2e/.env
[GET] /google-services.json
[GET] /config/firebase-admin.json
[GET] /.env
[GET] /firebase.json
[GET] /public/admin.json
[GET] /api/fs/read
[GET] /gc-service.json
[GET] /push_config.json
[GET] /gcp-key.json
[GET] /userfiles/x
[GET] /api/system/fileView
[GET] /firebase-credentials.json
[GET] /....//....//....//..../.env
[GET] /api/console/api_server
[GET] /google-credentials.json
[GET] /docker-compose.production.yml
[GET] /docker-compose.prod.yml
[GET] /static//.env
[GET] /docker-compose.staging.yml
[GET] /static//app/.env
[GET] /.docker/secrets.json
[GET] /.//.env
[GET] /firebase-config.js
[GET] /.terraform.lock.hcl
[GET] /Dockerrun.aws.json
[GET]
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
OceanTreasure
2026-10-26 08:44:20
(10 hours ago)
tcp/80; WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927): "GET /" @ 2026-10-26T08 ...
show more
tcp/80; WEB_SERVER Next.js Middleware Authorization Bypass (CVE-2025-29927): "GET /" @ 2026-10-26T08:44:20Z
show less
Web App Attack
๐จ๐ญ
dalslab ltd
2026-10-26 08:01:40
(11 hours ago)
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.700 by zone "rl_per_ip", ...
show more
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.700 by zone "rl_per_ip", client: 34.178.206.183, server: ai.dalslab.com, request: "GET /dashboard/api-keys HTTP/2.0", host: "ai.dalslab.com"
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.680 by zone "rl_per_ip", client: 34.178.206.183, server: ai.dalslab.com, request: "GET /projects HTTP/2.0", host: "ai.dalslab.com"
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.680 by zone "rl_per_ip", client: 34.178.206.183, server: ai.dalslab.com, request: "GET /projects HTTP/2.0", host: "ai.dalslab.com"
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.670 by zone "rl_per_ip", client: 34.178.206.183, server: ai.dalslab.com, request: "GET /dashboard/integrations HTTP/2.0", host: "ai.dalslab.com"
2026/10/26 09:01:39 [error] 480#480: *615992 limiting requests, excess: 200.660 by zone "rl_per_ip", client: 34.178.206.183, server: ai.dalslab.com,
...
show less
Brute-Force
SSH
Anonymous
2026-10-26 07:45:20
(11 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-10-25 23:43:12
(19 hours ago)
2026-10-26 00:41:28 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ) && 20 ...
show more
2026-10-26 00:41:28 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ) && 2026-10-26 00:41:28 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env) && 2026-10-26 00:41:28 AH10244: invalid URI path (/public/plugins/alertlist/../../../../../../../../proc/self/environ) && 219 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
kbeezie
2026-10-25 23:38:13
(19 hours ago)
34.178.206.183 - - [25/Oct/2026:19:38:10 -0400] "GET /%2Fsettings HTTP/1.1" 429 162 "-" "Mozilla/5.0 ...
show more
34.178.206.183 - - [25/Oct/2026:19:38:10 -0400] "GET /%2Fsettings HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.178.206.183 - - [25/Oct/2026:19:38:10 -0400] "GET /_astro/pages/index.astro.mjs.map HTTP/1.1" 429 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.178.206.183 - - [25/Oct/2026:19:38:12 -0400] "GET /login HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.178.206.183 - - [25/Oct/2026:19:38:12 -0400] "GET /account/login HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.178.206.183 - - [25/Oct/2026:19:38:12 -0400] "GET /auth/login HTTP/1.1" 429 564 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-25 22:41:29
(20 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
LRob
2026-10-25 22:29:02
(21 hours ago)
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perpl ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot), Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html) | path: /.htpasswd, /terraform.tfstate, /.env.staging.local
show less
Bad Web Bot
๐จ๐ญ
dalslab ltd
2026-10-25 21:51:11
(21 hours ago)
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST / HTTP/1.1" 405 154 "-" "CCBot/2.0 (https://co ...
show more
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST / HTTP/1.1" 405 154 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST / HTTP/1.1" 405 154 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST /graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST / HTTP/1.1" 405 154 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.178.206.183 - - [25/Oct/2026:22:51:11 +0100] "POST /api/graphql HTTP/1.1" 405 556 "http://dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-25 19:59:51
(23 hours ago)
Multiple WAF Violations
Web App Attack
๐จ๐ญ
dalslab ltd
2026-10-25 19:18:38
(1 day ago)
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.490 by zone "rl_per_ip", ...
show more
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.490 by zone "rl_per_ip", client: 34.178.206.183, server: music.dalslab.com, request: "GET /%2Fapi/config HTTP/2.0", host: "music.dalslab.com"
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.390 by zone "rl_per_ip", client: 34.178.206.183, server: music.dalslab.com, request: "GET /.s3cfg HTTP/2.0", host: "music.dalslab.com"
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.360 by zone "rl_per_ip", client: 34.178.206.183, server: music.dalslab.com, request: "GET /api/v1/.env HTTP/2.0", host: "music.dalslab.com"
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.330 by zone "rl_per_ip", client: 34.178.206.183, server: music.dalslab.com, request: "GET /services/.env HTTP/2.0", host: "music.dalslab.com"
2026/10/25 20:18:37 [error] 425#425: *567403 limiting requests, excess: 200.280 by zone "rl_per_ip", client: 34.178.206.183, server: musi
...
show less
Brute-Force
SSH
๐ฎ๐น
VHosting
2026-10-25 19:10:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack