🇺🇸
micropedro
2026-11-12 23:44:26
UTC ·
(3 hours ago)
4 incidents: malicious activity. First: 2026-11-10 07:21, Last: 2026-11-12 19:44 UTC. Triggers: unknown.
Port Scan
🇨🇦
Blinker73
2026-11-02 23:55:19
UTC ·
(1 week ago)
34.34.110.6 - - [02/Nov/2026:18:55:18 -0500] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +claudebot@anthropic ...
show more
34.34.110.6 - - [02/Nov/2026:18:55:18 -0500] "GET /document.php?modulepart=systemtools&file=../conf/conf.php&hashp=shared HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
show less
Bad Web Bot
Web App Attack
🇩🇪
33three
2026-11-02 20:04:19
UTC ·
(1 week ago)
Fail2Ban jail WebAttack triggered
Brute-Force
2026-11-02 14:15:39
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-11-02 13:49:21
UTC ·
(1 week ago)
"GET /.env.preprod HTTP/1.1"
Hacking
Web App Attack
🇸🇪
earnquest
2026-11-02 12:32:26
UTC ·
(1 week ago)
Vulnerability scanning detected on EarnQuest Server | Trigger path: /__nuxt_config.json | Total attempts: 5 | Sample paths: /settings/_payload.json, /.env.prod.bak, /.env.production.bak, /__nuxt_config.json | User-Agent: Mozilla/5.0 (compatible; Meta ...
show more
Vulnerability scanning detected on EarnQuest Server | Trigger path: /__nuxt_config.json | Total attempts: 5 | Sample paths: /settings/_payload.json, /.env.prod.bak, /.env.production.bak, /__nuxt_config.json | User-Agent: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/web... | Blocked by automated scanner detection middleware
show less
Web App Attack
Port Scan
🇺🇸
Shouddy Tarano
2026-11-02 12:31:50
UTC ·
(1 week ago)
[Mon Nov 02 06:31:48.115295 2026] [authz_core:error] [pid 1113509:tid 139923373938432] [client 34.34.110.6:37010] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/api
[Mon Nov 02 06:31:48.307829 2026] [authz_core:error] [pid ...
show more
[Mon Nov 02 06:31:48.115295 2026] [authz_core:error] [pid 1113509:tid 139923373938432] [client 34.34.110.6:37010] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/api
[Mon Nov 02 06:31:48.307829 2026] [authz_core:error] [pid 1113275:tid 139923784918784] [client 34.34.110.6:37042] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/userfiles
[Mon Nov 02 06:31:48.841846 2026] [authz_core:error] [pid 1119818:tid 139923885631232] [client 34.34.110.6:37122] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/firebase-credentials.json
[Mon Nov 02 06:31:48.895953 2026] [authz_core:error] [pid 1119818:tid 139923843667712] [client 34.34.110.6:37056] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/firebase.json
[Mon Nov 02 06:31:49.530597 2026] [authz_core:error] [pid 1113509:tid 139922895783680] [client 34.34.110.6:37226] AH01630: client denied by server configuration: /var/www/ccmApi-dev/public/.
...
show less
DDoS Attack
Web Spam
Brute-Force
Web App Attack
🇺🇸
oralunal
2026-11-02 09:43:22
UTC ·
(1 week ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇻🇳
hoangviet88vn
2026-11-02 08:23:08
UTC ·
(1 week ago)
Coraza WAF (dev reverse proxy): mass scan .env/process.env/railway.json/nx.json/compose.yml across multiple vhosts (CRS 930120/932160/920450)
Web App Attack
Hacking
🇧🇪
boxed-it
2026-11-02 08:20:27
UTC ·
(1 week ago)
GET /.env.supabase (Tarpitted for 12s, wasted 720B)
Web App Attack
🇳🇱
informedclearly.com
2026-11-02 07:39:09
UTC ·
(1 week ago)
WAF_BAN reason=BACKUP_PROBE rule=BACKUP_EXT hits=3 path=/env.old? ua=Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile
Hacking
🇫🇷
arteagasoft
2026-11-02 07:36:39
UTC ·
(1 week ago)
[02/Nov/2026:07:36:37 +0000] 404 - GET http api.esaywassap.com "/debug" [Client 34.34.110.6] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
[02/Nov/ ...
show more
[02/Nov/2026:07:36:37 +0000] 404 - GET http api.esaywassap.com "/debug" [Client 34.34.110.6] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
[02/Nov/2026:07:36:37 +0000] 404 - GET http api.esaywassap.com "/laravel/.env" [Client 34.34.110.6] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-"
[02/Nov/2026:07:36:37 +0000] 404 - GET http api.esaywassap.com "/.env.swp" [Client 34.34.110.6] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-"
[02/Nov/2026:07:36:37 +0000] 404 - GET http api.esaywassap.com "/.env.php.bak" [Client 34.34.110.6] [Length 122] [Gzip 1.35] "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.am
...
show less
Brute-Force
🇮🇹
VHosting
2026-11-02 06:35:05
UTC ·
(1 week ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-11-02 06:07:44
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇦
zXero
2026-11-02 05:15:51
UTC ·
(1 week ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
