π©πͺ
altenglaner
2026-10-13 22:22:30
(23 seconds ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
π§πΎ
lns.bz
2026-10-13 21:37:26
(45 minutes ago)
Too many 404 requests [BY]
Web App Attack
π«π·
LRNP
2026-10-13 19:53:16
(2 hours ago)
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /robots.txt HTTP/1.1" 404 118 "-" "Mozilla ...
show more
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /robots.txt HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /xqz5n5o8e2my8h8b3rgx HTTP/1.1" 404 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /admin HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /onboarding HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
_:443 34.19.161.161 - - [13/Oct/2026:19:53:16 +0000] "GET /register HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/
...
show less
Bad Web Bot
Web App Attack
π§πͺ
cmbplf
2026-10-13 19:47:36
(2 hours ago)
103 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
π©πͺ
konseptit
2026-10-13 18:09:56
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.19.161.161 (CA/Canada/161.161.19.34. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.19.161.161 (CA/Canada/161.161.19.34.bc.googleusercontent.com)
show less
SQL Injection
Anonymous
2026-10-13 17:49:58
(4 hours ago)
Aggressive web scan
Web App Attack
πͺπΈ
robotstxt
2026-10-13 17:37:17
(4 hours ago)
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ H ...
show more
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:17:37:15 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
...
show less
Web Spam
Web App Attack
π©πͺ
updown.io
2026-10-13 17:33:24
(4 hours ago)
{"level":"info","ts":1791912802.3876152,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791912802.3876152,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.19.161.161","remote_port":"36734","client_ip":"34.19.161.161","proto":"HTTP/2.0","method":"POST","host":"status.reklamacie.sk","uri":"/cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh","headers":{"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Content-Type":["text/plain"],"Content-Length":["90"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.reklamacie.sk","ech":false}},"bytes_read":0,"user_id":"","duration":0.001226099,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1791912802.4695363,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.19.161.161","remote_port":"36734","client_ip":"34.19.161.161","prot
...
show less
DDoS Attack
Web App Attack
π³π±
debestelapp
2026-10-13 16:50:09
(5 hours ago)
Web App Attack
π¨π¦
Anytech
2026-10-13 16:23:54
(5 hours ago)
Blocked by Conn-Monitor: env-probing
Web App Attack
Hacking
Anonymous
2026-10-13 15:43:19
(6 hours ago)
Trolling and Banned
Web App Attack
Hacking
πΊπΈ
jormaster3k
2026-10-13 15:13:49
(7 hours ago)
Attack against Apache (too many 404s)
Web App Attack
Anonymous
2026-10-13 14:45:38
(7 hours ago)
34.19.161.161 - - [13/Oct/2026:09:45:37 -0500] "GET /.env.backup HTTP/1.1" 301 258 "-" "Mozilla/5.0 ...
show more
34.19.161.161 - - [13/Oct/2026:09:45:37 -0500] "GET /.env.backup HTTP/1.1" 301 258 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 172.71.120.101
34.19.161.161 - - [13/Oct/2026:09:45:37 -0500] "GET /.env.save HTTP/1.1" 301 256 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 172.71.120.101
34.19.161.161 - - [13/Oct/2026:09:45:37 -0500] "GET /.env.prod HTTP/1.1" 301 256 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 172.71.120.102
34.19.161.161 - - [13/Oct/2026:09:45:38 -0500] "GET /.env.local?raw HTTP/1.1" 301 261 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 172.71.120.101
34.19.161.161 - - [13/Oct/2026:09:45:38 -0500]
...
show less
Brute-Force
Bad Web Bot
Web App Attack
πͺπΈ
robotstxt
2026-10-13 14:23:59
(7 hours ago)
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/e ...
show more
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
34.19.161.161 - - [13/Oct/2026:14:23:57 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.19.161.161"
...
show less
Web Spam
Web App Attack
Anonymous
2026-10-13 14:02:33
(8 hours ago)
2026/10/13 14:02:31 [error] 3693533#3693533: *264703 [client 34.19.161.161] ModSecurity: Access deni ...
show more
2026/10/13 14:02:31 [error] 3693533#3693533: *264703 [client 34.19.161.161] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `5' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.30.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "idealcollegeonline.org"] [uri "/@fs/root/.aws/credentials"] [unique_id "179190015172.530162"] [ref ""], client: 34.19.161.161, server: idealcollegeonline.org, request: "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0", host: "idealcollegeonline.org"
2026/10/13 14:02:31 [error] 3693533#3693533: *264703 [client 34.19.161.161] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_I
...
show less
Brute-Force