Anonymous
2026-07-29 07:00:00
(3 hours ago)
Apache probe; attempts=843; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.develo ...
show more
Apache probe; attempts=843; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/configprops | /actuator/env | /actuator/mappings | /admin/.env | /api/.env | /api/.env/ | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
๐ฉ๐ช
macrob
2026-07-27 10:33:36
(1 day ago)
2026/07/27 10:33:34 [error] 4144894#4144894: *416814036 access forbidden by rule, client: 34.185.160 ...
show more
2026/07/27 10:33:34 [error] 4144894#4144894: *416814036 access forbidden by rule, client: 34.185.160.241, server: bonocom.org, request: "GET /.aws/credentials HTTP/2.0", host: "bonocom.org"
2026/07/27 10:33:34 [error] 4144894#4144894: *416814036 access forbidden by rule, client: 34.185.160.241, server: bonocom.org, request: "GET /.aws/config HTTP/2.0", host: "bonocom.org"
2026/07/27 10:33:34 [error] 4144894#4144894: *416814036 access forbidden by rule, client: 34.185.160.241, server: bonocom.org, request: "GET /.git/HEAD HTTP/2.0", host: "bonocom.org"
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-27 10:05:30
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ธ๐ช
vaia.cloud
2026-07-27 09:05:02
(2 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ญ๐บ
DumaNet
2026-07-27 03:13:00
(2 days ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 27. 00:36:25
Source IP: 34.185 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 27. 00:36:25
Source IP: 34.185.160.241
Portion of the log(s):
34.185.160.241 - [27/Jul/2026:00:36:25 +0200] "GET /.env.old HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.160.241 - [27/Jul/2026:00:36:24 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.160.241 - [27/Jul/2026:00:36:24 +0200] "GET /.git-credentials HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.160.241 - [27/Jul/2026:00:36:24 +0200] "GET /.aws/credentials HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.160.241 - [27/Jul/2026:00:36:24 +0200] "GET /.gitconfig HTTP/1.1" 404 153 "-" "Mozilla
show less
Web App Attack
๐ง๐ช
voormedia
2026-07-26 21:25:23
(2 days ago)
Accessed trap at '/.aws/config'
Web App Attack
Anonymous
2026-07-26 20:42:09
(2 days ago)
34.185.160.241 - - [26/Jul/2026:22:42:02 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 106 "-" "meta- ...
show more
34.185.160.241 - - [26/Jul/2026:22:42:02 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 106 "-" "meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
๐ซ๐ท
IRISIO
2026-07-26 20:26:42
(2 days ago)
scans/SQL injection/spam posts : 927 queries
Web App Attack
SQL Injection
๐ฉ๐ช
mondor.ro
2026-07-26 19:55:33
(2 days ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.185.160.241, Reason ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 34.185.160.241, Reason:[(mod_security) mod_security (id:210730) triggered by 34.185.160.241 (DE/Germany/241.160.185.34.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
๐ซ๐ท
Lunix
2026-07-26 19:02:17
(2 days ago)
Brute-Force
Web App Attack
Anonymous
2026-07-26 18:45:12
(2 days ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /.env.bak
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-07-26 13:52:41
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
melroy89
2026-07-26 13:19:14
(2 days ago)
34.185.160.241 - - [26/Jul/2026:15:19:07 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Macintosh; ...
show more
34.185.160.241 - - [26/Jul/2026:15:19:07 +0200] "GET / HTTP/1.1" 403 9 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36" "qa.melroy.org" 0.000
34.185.160.241 - - [26/Jul/2026:15:19:08 +0200] "GET /rclone.conf HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] " "qa.melroy.org" 0.000
34.185.160.241 - - [26/Jul/2026:15:19:08 +0200] "GET /z9x8c7v6b5-debug-trigger-qa.melroy.org HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] " "qa.melroy.org" 0.000
34.185.160.241 - - [26/Jul/2026:15:19:08 +0200] "GET /wp-json HTTP/1.1" 403 9 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-SearchBot/1.0; +mailto:[email protected] " "qa.melroy.org" 0.000
34.185.160.241 - - [26/Jul/2026:15:19:09 +0200] "GET /secrets.json HTTP/1.1"
...
show less
Web App Attack
๐ซ๐ท
GEDAL
2026-07-26 10:38:42
(2 days ago)
Fail2ban webexploits @ <hostname> : 34.185.160.241 - - [26/Jul/2026:12:38:41 +0200] "GET /.git/confi ...
show more
Fail2ban webexploits @ <hostname> : 34.185.160.241 - - [26/Jul/2026:12:38:41 +0200] "GET /.git/config HTTP/2.0" 301 162 "-" "anthropic-ai"
show less
Brute-Force
SSH
๐ณ๐ฑ
Savvii
2026-07-26 09:41:32
(3 days ago)
22 attempts against mh-misbehave-ban on twig
Brute-Force
Bad Web Bot
Web App Attack