๐ฉ๐ช
Fahreddin Ergin
2026-09-19 16:48:49
(11 minutes ago)
2026-09-18 19:12:36,632 fail2ban.actions [549]: NOTICE [traefik-botscan] Ban 34.38.113.44
20 ...
show more
2026-09-18 19:12:36,632 fail2ban.actions [549]: NOTICE [traefik-botscan] Ban 34.38.113.44
2026-09-18 19:12:37,009 fail2ban.actions [549]: NOTICE [traefik-flood] Ban 34.38.113.44
2026-09-19 16:48:49,136 fail2ban.actions [549]: NOTICE [traefik-flood] Ban 34.38.113.44
...
show less
Brute-Force
SSH
๐ซ๐ท
LiloBzH
2026-09-19 16:32:32
(28 minutes ago)
34.38.113.44 - - [19/Sep/2026:18:32:30 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 ( ...
show more
34.38.113.44 - - [19/Sep/2026:18:32:30 +0200] "GET /.git/config HTTP/2.0" 403 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:32:30 +0200] "GET /.git/config.bak HTTP/2.0" 403 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:32:30 +0200] "GET /.git/info/exclude HTTP/2.0" 403 107 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
Anonymous
2026-09-19 16:30:03
(30 minutes ago)
CrowdSec decision: crowdsecurity/http-crawl-non_statics (origin: crowdsec)
Port Scan
๐ฎ๐ช
AutosOnShow
2026-09-19 16:12:05
(48 minutes ago)
blocked for webapp attack | path requested: /.git/config | seen at 2026-09-19 16:11:24.151 |
Web App Attack
๐บ๐ธ
nasset
2026-09-19 15:55:53
(1 hour ago)
34.38.113.44 - - [19/Sep/2026:08:55:52 -0700] "GET /.env.testing HTTP/1.1" 403 584 "-" "Mozilla/5.0 ...
show more
34.38.113.44 - - [19/Sep/2026:08:55:52 -0700] "GET /.env.testing HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:08:55:52 -0700] "GET /.env.swp HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:08:55:52 -0700] "GET /.env.test HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:08:55:52 -0700] "GET /.env~ HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:08:55:53 -0700] "GET /.git-askpass.sh HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-09-19 15:51:32
(1 hour ago)
Repeated 403 Forbidden responses
Web App Attack
๐ฉ๐ช
netclix.gr
2026-09-19 15:51:04
(1 hour ago)
(aggressive_scan) Aggressive Web Exploit Scan 34.38.113.44 (BE/Belgium/44.113.38.34.bc.googleusercon ...
show more
(aggressive_scan) Aggressive Web Exploit Scan 34.38.113.44 (BE/Belgium/44.113.38.34.bc.googleusercontent.com): 5 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.38.113.44 - - [19/Sep/2026:18:51:00 +0300] "GET /.env.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:51:01 +0300] "GET /_profiler/phpinfo.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:51:01 +0300] "GET /admin/phpinfo.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:51:01 +0300] "GET /admin_phpinfo.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [19/Sep/2026:18:51:01 +0300] "GET /api/phpinfo.php HTTP/2.0" 404 808 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Port Scan
๐ฉ๐ช
Sรฉfora Srl
2026-09-19 15:46:46
(1 hour ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
Anonymous
2026-09-19 15:41:40
(1 hour ago)
[Drupal AbuseIPDB module] Request path is blacklisted. /wp-config.php
Web App Attack
Anonymous
2026-09-19 15:31:29
(1 hour ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-09-19 15:10:56
(1 hour ago)
[Sun Sep 20 01:10:55.707400 2026] [security2:error] [pid 754596] [client 34.38.113.44:41230] [client ...
show more
[Sun Sep 20 01:10:55.707400 2026] [security2:error] [pid 754596] [client 34.38.113.44:41230] [client 34.38.113.44] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.co.nz"] [uri "/.aws/credentials"] [unique_id "aq6l_5Uvc5v5EE5-WB4kgAAAAB0"]
...
show less
Web App Attack
Anonymous
2026-09-19 15:06:20
(1 hour ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ฉ๐ช
IloGus
2026-09-19 15:01:25
(1 hour ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ซ๐ท
Mickmick21
2026-09-19 14:54:18
(2 hours ago)
34.38.113.44 - - [19/Sep/2026:16:54:17 +0200] "GET /.aws/.env HTTP/2.0" 418 0 "-" "Mozilla/5.0 (Wind ...
show more
34.38.113.44 - - [19/Sep/2026:16:54:17 +0200] "GET /.aws/.env HTTP/2.0" 418 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Port Scan
Web App Attack
๐ฉ๐ช
dom4k
2026-09-19 14:40:14
(2 hours ago)
34.38.113.44 - - [19/Sep/2026:14:40:13 +0000] "GET /.aws/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Wind ...
show more
34.38.113.44 - - [19/Sep/2026:14:40:13 +0000] "GET /.aws/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web Spam
Bad Web Bot
Web App Attack