๐บ๐ธ
antlac1
2026-10-20 18:43:59
(1 hour ago)
CrowdSec detected malicious behaviour (scenario: LePresidente/http-generic-403-bf)
Web App Attack
๐บ๐ธ
jormaster3k
2026-10-20 16:46:15
(3 hours ago)
Attack against Apache (too many 404s)
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 16:26:03
(3 hours ago)
[ti-01ov] Web exploit scanning: 8 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 8 suspicious requests detected by fail2ban jail <name>. Example: 34.178.60.69 - - \[20/Oct/2026:18:25:50 +0200\] "GET /admin/.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(Linux\; Android 6.0.1\; Nexus 5X Build/MMB29P\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Mobile Safari/537.36 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
34.178.60.69 - - \[20/Oct/2026:18:25:50 +0200\] "GET /config/.env HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
34.178.60.69 - - \[20/Oct/2026:18:25:50 +0200\] "GET /build/.env HTTP/1.1" 403 617 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-SearchBot/1.0\; +https://openai.com/searchbot"
34.178.60.69 - - \[20/Oct/2026:18:25:50 +0200\] "GET /web
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-10-20 16:24:12
(3 hours ago)
2026-10-20 18:22:41 GET /.dbeaver/credentials-config.json [404] && 2026-10-20 18:22:42 GET /@fs/app/ ...
show more
2026-10-20 18:22:41 GET /.dbeaver/credentials-config.json [404] && 2026-10-20 18:22:42 GET /@fs/app/.env?raw?? [404] && 2026-10-20 18:22:42 GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? [404] && 214 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
ruusvuu
2026-10-20 07:37:47
(12 hours ago)
Automated abuse report: 25 attack/probe requests from Google LLC / NL.
Targeted paths: /images../.en ...
show more
Automated abuse report: 25 attack/probe requests from Google LLC / NL.
Targeted paths: /images../.env, /static//.env, /assets../.env, /static//app/.env, /.//.env.
Sample log lines:
[demo.mirregistry] 34.178.60.69 - - [20/Oct/2026:00:37:47 -0700] "GET /build../.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
[demo.mirregistry] 34.178.60.69 - - [20/Oct/2026:00:37:47 -0700] "GET /static/..;/..;/.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
[demo.mirregistry] 34.178.60.69 - - [20/Oct/2026:00:37:47 -0700] "GET /api/.env/public/.env HTTP/1.1" 404 241 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +โฆ
Detected by an automated web-server log monitor.
show less
Web App Attack
Anonymous
2026-10-20 06:16:12
(13 hours ago)
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 ...
show more
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.178.60.69
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 34.178.60.69
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env.local?.svg?.wasm?init HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 34.178.60.69
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.178.60.69
34.178.60.69 - - [20/Oct/2026:01:16:11 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-Us
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 23:40:38
(20 hours ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.178.60.69 - - [20/Oct/2026:01:40:27 +0200] "GET /.htpasswd HTTP/2.0" 403 1841 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-10-19 22:35:03
(21 hours ago)
[TueOct2000:34:58.5305892026][security2:error][pid1665394:tid1665539][client34.178.60.69:0]ModSecuri ...
show more
[TueOct2000:34:58.5305892026][security2:error][pid1665394:tid1665539][client34.178.60.69:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"www.elearning.aaaa6877.org\"][uri\"/graphql\"][unique_id\"atabEmo7bD5Ta0NoOY8HqQAAAMc\"]\,referer:https://www.elearning.aaaa6877.org
show less
Port Scan
Brute-Force
Web App Attack
๐ฌ๐ง
Comberton
2026-10-19 21:31:08
(22 hours ago)
Ban via F2B web probe
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-19 20:20:55
(23 hours ago)
2026/10/19 21:20:54 [error] 2414#2414: *15080 access forbidden by rule, client: 34.178.60.69, server ...
show more
2026/10/19 21:20:54 [error] 2414#2414: *15080 access forbidden by rule, client: 34.178.60.69, server: vp-arc.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "vp-arc.org"
2026/10/19 21:20:54 [error] 2414#2414: *15080 access forbidden by rule, client: 34.178.60.69, server: vp-arc.org, request: "GET /public.api/.env HTTP/2.0", host: "vp-arc.org"
2026/10/19 21:20:54 [error] 2414#2414: *15080 access forbidden by rule, client: 34.178.60.69, server: vp-arc.org, request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "vp-arc.org"
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-19 18:17:44
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ฎ
paissangroup
2026-10-19 16:45:30
(1 day ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-19 14:45:41
(1 day ago)
34.178.60.69 - - [19/Oct/2026:16:45:40 +0200] "GET /dznkokjx9nnfkrxkm4gg HTTP/1.1" 403 124 "-" "CCBo ...
show more
34.178.60.69 - - [19/Oct/2026:16:45:40 +0200] "GET /dznkokjx9nnfkrxkm4gg HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.178.60.69 - - [19/Oct/2026:16:45:40 +0200] "GET /z9x8c7v6b5-debug-trigger-fictazm.org HTTP/1.1" 403 124 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
34.178.60.69 - - [19/Oct/2026:16:45:41 +0200] "POST /_next HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.178.60.69 - - [19/Oct/2026:16:45:41 +0200] "GET /%2Fsettings HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.178.60.69 - - [19/Oct/2026:16:45:41 +0200] "GET /api/orders/..%2f..%2fproc/self/environ HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.178.60.69 - - [19/Oct/2026:16:45:41 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; YouBot/1.0;
...
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-19 13:23:13
(1 day ago)
34.178.60.69 - - [19/Oct/2026:13:22:10 +0000] "GET /robots.txt HTTP/2.0" 403 189 "-" "Mozilla/5.0 (c ...
show more
34.178.60.69 - - [19/Oct/2026:13:22:10 +0000] "GET /robots.txt HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.178.60.69"
34.178.60.69 - - [19/Oct/2026:13:22:10 +0000] "GET /signup HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.178.60.69"
34.178.60.69 - - [19/Oct/2026:13:22:11 +0000] "GET /account HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.178.60.69"
34.178.60.69 - - [19/Oct/2026:13:22:11 +0000] "GET /onboarding HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" edge="34.178.60.69"
34.178.60.69 - - [19/Oct/2026:13:22:11 +0000] "GET /portal HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko
...
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-10-19 11:56:30
(1 day ago)
Web attack/malicious scanning detected
Web App Attack