๐ฉ๐ช
ghostwarriors
2026-10-20 21:20:07
(1 hour ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
netman
2026-10-20 20:54:52
(1 hour ago)
HTTP: 34.32.124.197 blocked because of 100 failures
...
DDoS Attack
Web App Attack
๐ฉ๐ช
Blexyel
2026-10-20 20:47:27
(1 hour ago)
34.32.124.197 - - [20/Oct/2026:22:47:27 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 ( ...
show more
34.32.124.197 - - [20/Oct/2026:22:47:27 +0200] "GET /.git/config HTTP/1.1" 404 14 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-20 20:25:01
(2 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ซ๐ท
baphomet
2026-10-20 19:48:01
(2 hours ago)
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.e ...
show more
Probed planted web canary URI (not a real app path).
HTTP request completed against planted URIs (.env/wp-login/xmlrpc/phpmyadmin/.git).
jail=nginx-canary proto=tcp port=80,443 failures>=2 class=web-app-probe
these paths are not real apps on this host; hit is hostile recon
when=2026-10-20T19:48:01Z sensor=fail2ban role=web-canary
src=34.32.124.197
show less
Web App Attack
๐บ๐ธ
antlac1
2026-10-20 18:44:45
(4 hours ago)
CrowdSec detected malicious behaviour (scenario: crowdsecurity/http-admin-interface-probing)
Web App Attack
๐ซ๐ท
Murazaki
2026-10-20 16:56:35
(5 hours ago)
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:18:56:31 +0200] "GET /mailer/.env HTTP/1.1" 403 135 ...
show more
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:18:56:31 +0200] "GET /mailer/.env HTTP/1.1" 403 13522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:18:56:32 +0200] "GET /mail/.env HTTP/1.1" 403 13527 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.37:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:18:56:32 +0200] "GET /mailing/.env HTTP/1.1" 403 13523 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:18:56:34 +0200] "GET /mailgun/.env HTTP/1.1" 403 13530 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
n
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-20 12:56:59
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.124.197 (197.124.32.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.124.197 (197.124.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 08:56:53.991107 2026] [security2:error] [pid 25995:tid 25995] [client 34.32.124.197:59516] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "netguard.us"] [uri "/.git/config"] [unique_id "atdlFTU-ee0ZrEExEMqijAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Laplus
2026-10-20 12:41:42
(10 hours ago)
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.git/config HTTP/1.1" 404 1262 "-" "Mozilla/5.0 ...
show more
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.git/config HTTP/1.1" 404 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.env HTTP/1.1" 404 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.env HTTP/1.1" 404 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.env.local HTTP/1.1" 404 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.32.124.197 - - [20/Oct/2026:14:41:39 +0200] "GET /.env.local HTTP/1.1" 404 1262 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safar
...
show less
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-20 12:36:53
(10 hours ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
netfactotum
2026-10-20 11:55:18
(10 hours ago)
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 11:46:48
(10 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-20 11:16:24
(11 hours ago)
34.32.124.197 - - [20/Oct/2026:11:16:24 +0000] "GET /.git/config HTTP/1.1" 404 19 "-" "-" 109051 "-" ...
show more
34.32.124.197 - - [20/Oct/2026:11:16:24 +0000] "GET /.git/config HTTP/1.1" 404 19 "-" "-" 109051 "-" "-" 0ms
34.32.124.197 - - [20/Oct/2026:11:16:24 +0000] "GET /.env HTTP/1.1" 404 19 "-" "-" 109053 "-" "-" 0ms
...
show less
Web App Attack
Anonymous
2026-10-20 10:58:42
(11 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
๐ซ๐ท
Murazaki
2026-10-20 10:54:49
(11 hours ago)
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:46 +0200] "GET /mailer/.env HTTP/1.1" 403 135 ...
show more
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:46 +0200] "GET /mailer/.env HTTP/1.1" 403 13529 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:46 +0200] "GET /mail/.env HTTP/1.1" 403 13520 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.37:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:47 +0200] "GET /mailing/.env HTTP/1.1" 403 13523 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:48 +0200] "GET /mailgun/.env HTTP/1.1" 403 13523 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "[fc00:db8:2::24]:9000"
netdata.balamb.fr 34.32.124.197 - - [20/Oct/2026:12:54:48 +0200]
...
show less
Bad Web Bot