Anonymous
2026-10-20 11:58:27
(2 hours ago)
Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files; Web a ...
show more
Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files; Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files
show less
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 09:12:49
(5 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.32.216.134 - - [20/Oct/2026:11:12:33 +0200] "GET /img../.env HTTP/2.0" 403 395 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-10-20 08:20:25
(5 hours ago)
(badbots) Bad bot user-agent [redacted] from 34.32.216.134 (134.216.32.34.bc.googleusercontent.com)
Hacking
๐ฉ๐ช
spirttm
2026-10-19 17:39:22
(20 hours ago)
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 ...
show more
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 157 "-" "-"
34.32.216.134 - - [19/Oct/2026:17:39:21 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 157 "-" "-"
34
...
show less
Port Scan
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-19 15:33:11
(22 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
updown.io
2026-10-19 12:36:19
(1 day ago)
{"level":"info","ts":1792413378.8786957,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792413378.8786957,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.32.216.134","remote_port":"57128","client_ip":"34.32.216.134","proto":"HTTP/2.0","method":"POST","host":"status.selia.co","uri":"/graphql","headers":{"Sec-Ch-Ua-Mobile":["?0"],"Content-Length":["86"],"Origin":["https://status.selia.co"],"Accept":["*/*"],"Priority":["u=1, i"],"Sec-Fetch-Dest":["empty"],"Referer":["https://status.selia.co"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"],"Sec-Ch-Ua":["\"Chromium\";v=\"152\", \"Not?A_Brand\";v=\"24\", \"Brave\";v=\"152\""],"Content-Type":["application/json"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Sec-Fetch-Site":["same-origin"],"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["cors"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.selia.co","ec
...
show less
DDoS Attack
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-19 10:01:35
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoin ...
show more
Triggered Cloudflare WAF (firewallCustom) from NL.
Action: BLOCK | Protocol: HTTP/2 (POST) | Endpoint: /icecoder/lib/terminal-xhr.php | UA: DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot) โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
Marco711
2026-10-19 09:49:21
(1 day ago)
CrowdSec: crowdsecurity/http-probing
Web App Attack
๐ฌ๐ง
consul.to
2026-10-19 09:44:17
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
francelink.fr
2026-10-19 09:09:24
(1 day ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-10-19T09:08:30.000Z.
Web App Attack
๐ฉ๐ช
Marco711
2026-10-19 06:31:35
(1 day ago)
CrowdSec: crowdsecurity/http-sensitive-files
Web App Attack
๐ธ๐ช
Esko
2026-10-19 06:15:39
(1 day ago)
34.32.216.134 - - [19/Oct/2026:06:15:39 +0000] "POST / HTTP/1.1" 481 0 "-" "Mozilla/5.0 (compatible; ...
show more
34.32.216.134 - - [19/Oct/2026:06:15:39 +0000] "POST / HTTP/1.1" 481 0 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-19 05:57:04
(1 day ago)
34.32.216.134 - - [19/Oct/2026:05:56:52 +0000] "GET /robots.txt HTTP/2.0" 403 117 "https://durcal.ne ...
show more
34.32.216.134 - - [19/Oct/2026:05:56:52 +0000] "GET /robots.txt HTTP/2.0" 403 117 "https://durcal.net/robots.txt" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="34.32.216.134"
34.32.216.134 - - [19/Oct/2026:05:56:53 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_4a0169c19e4a032e16f4d0895f983fd3.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.32.216.134"
34.32.216.134 - - [19/Oct/2026:05:56:53 +0000] "GET /z9x8c7v6b5-debug-trigger-durcal.net HTTP/2.0" 403 11749 "https://durcal.net/z9x8c7v6b5-debug-trigger-durcal.net" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.32.216.134"
34.32.216.134 - - [19/Oct/2026:05:56:53 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 13106 "https://durcal.net/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/15
...
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 05:51:08
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
crooze.net
2026-10-19 05:39:35
(1 day ago)
34.32.216.134 - - [19/Oct/2026:01:39:34 -0400] "GET /config/firebase-admin.json HTTP/2.0" 404 832 "- ...
show more
34.32.216.134 - - [19/Oct/2026:01:39:34 -0400] "GET /config/firebase-admin.json HTTP/2.0" 404 832 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Web App Attack