๐ฎ๐ณ
evicky2002
2026-07-22 06:00:00
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฎ๐น
paoloartone
2026-07-22 05:00:24
(1 day ago)
Reverse proxy TCO: 709 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 21/07/202 ...
show more
Reverse proxy TCO: 709 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 21/07/2026.
show less
Web App Attack
Hacking
Port Scan
๐ฉ๐ช
EGP Abuse Dept
2026-07-22 00:29:41
(1 day ago)
Scanning for web/db/file exploits on www.beukaccountants.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-07-21 22:42:43
(1 day ago)
2026/07/21 23:42:36 [error] 1770200#1770200: *586193 access forbidden by rule, client: 34.39.21.19, ...
show more
2026/07/21 23:42:36 [error] 1770200#1770200: *586193 access forbidden by rule, client: 34.39.21.19, server: api.betatechnologies.info, request: "GET /public/.env HTTP/2.0", host: "api.betatechnologies.info"
2026/07/21 23:42:37 [error] 1770200#1770200: *586193 access forbidden by rule, client: 34.39.21.19, server: api.betatechnologies.info, request: "GET /dev/.env HTTP/2.0", host: "api.betatechnologies.info"
2026/07/21 23:42:41 [error] 1770200#1770200: *586208 access forbidden by rule, client: 34.39.21.19, server: betatechnologies.info, request: "GET /config/.env HTTP/2.0", host: "betatechnologies.info"
show less
Brute-Force
Web App Attack
๐ฆ๐บ
aranguren.org
2026-07-21 22:28:40
(1 day ago)
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /.env HTTP/2.0" 404 1130 "https://api.aranguren.or ...
show more
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /.env HTTP/2.0" 404 1130 "https://api.aranguren.org/.env" "anthropic-ai"
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /.gitconfig HTTP/2.0" 404 1142 "https://api.aranguren.org/.gitconfig" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)"
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /.git/config HTTP/2.0" 404 1144 "https://api.aranguren.org/.git/config" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user"
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /rclone.conf HTTP/2.0" 404 1144 "https://api.aranguren.org/rclone.conf" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.39.21.19 - - [22/Jul/2026:08:28:39 +1000] "GET /.env.example HTTP/2.0" 404 1146 "https://api.aranguren.org/.env.example" "Mozilla/5.0 (compatible; Bytespider; [email protected] )"
34.39.21.19 - -
...
show less
Bad Web Bot
๐ธ๐ฌ
serverutama
2026-07-21 22:03:12
(1 day ago)
fail2ban[nginx-scanner]: scanning path sensitif (.git/.env/wp-config/secrets/dll).
Bad Web Bot
Web App Attack
Anonymous
2026-07-21 21:42:18
(1 day ago)
34.39.21.19 - - [21/Jul/2026:21:42:18 +0000] "GET /secrets.json HTTP/2.0" 301 162 "http://ivonne.ca ...
show more
34.39.21.19 - - [21/Jul/2026:21:42:18 +0000] "GET /secrets.json HTTP/2.0" 301 162 "http://ivonne.ca/secrets.json" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Claude-User/1.0; +mailto:[email protected] " "34.39.21.19" "-"
...
show less
Web App Attack
๐ฉ๐ช
zumbo.net
2026-07-21 20:55:34
(2 days ago)
[Tue Jul 21 23:55:33.243795 2026] [proxy_fcgi:error] [pid 918643:tid 918666] [client 34.39.21.19:0] ...
show more
[Tue Jul 21 23:55:33.243795 2026] [proxy_fcgi:error] [pid 918643:tid 918666] [client 34.39.21.19:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 23:55:33.244102 2026] [proxy_fcgi:error] [pid 918615:tid 918641] [client 34.39.21.19:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 23:55:33.244436 2026] [proxy_fcgi:error] [pid 918615:tid 918627] [client 34.39.21.19:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 23:55:33.286460 2026] [proxy_fcgi:error] [pid 918643:tid 918657] [client 34.39.21.19:0] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 23:55:33.288604 2026] [proxy_fcgi:error] [pid 881499:tid 881520] [client 34.39.21.19:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐จ๐ฟ
akac
2026-07-21 20:01:31
(2 days ago)
Web vulnerability scanning: HTTP/2 GET /.ssh/id_ed25519
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
todix
2026-07-21 19:54:45
(2 days ago)
WebAttack or semilar from 34.39.21.19
Web App Attack
๐ต๐ฑ
TaKeN
2026-07-21 18:29:59
(2 days ago)
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application pr ...
show more
Automated Wazuh local observation. Wazuh rule 31151 lvl=10 detected repeated HTTP web application probing from this source IP. Observed 6 matching blocked event(s) between 2026-07-21T20:29:59+02:00 and 2026-07-21T20:29:59+02:00. Sample requested paths: /graphql, /ngsw.json, /actuator/mappings, /pi.php, /core/.env.
show less
Web App Attack
Hacking
Anonymous
2026-07-21 18:16:07
(2 days ago)
Multiple pen test attempts.
Web App Attack
๐ฉ๐ช
grassau.com
2026-07-21 18:03:32
(2 days ago)
*Port Scan* detected from 34.39.21.19 (GB/United Kingdom/England/City of London/19.21.39.34.bc.googl ...
show more
*Port Scan* detected from 34.39.21.19 (GB/United Kingdom/England/City of London/19.21.39.34.bc.googleusercontent.com).
show less
Port Scan
Anonymous
2026-07-21 17:58:01
(2 days ago)
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebK ...
show more
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" 34.39.21.19
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] " 34.39.21.19
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user" 34.39.21.19
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env.bak HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.39.21.19
34.39.21.19 - - [21/Jul/2026:12:57:59 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)" 34.39.21.19
34.39.21.19 - - [21/Jul/2026:12
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-21 17:30:01
(2 days ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection