|
🇺🇸
Secure Gateway®️
|
|
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
|
Hacking
|
|
🇺🇸
ALSCO®️
|
|
Report By ALSCO Security Team: Potential CSRF Attack Detected
|
Hacking
|
|
🇺🇸
snappic
|
|
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)]
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
snappic
|
|
Scanning for .env files [GET /api/fs/read?allowOutsideWorkspace=true&path=/app/.env] [Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)]
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
masterguru
|
|
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
|
Bad Web Bot
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇨🇦
CentiDevOps
|
|
Web app scan: 33 requests in 0 s across 2 domains (301/444). Paths: /build../.env, /dist../.env, /files../.env (+5 more). Sample: 2026-11-05T08:54:49Z "GET /images../.env" 301
|
Hacking
Web App Attack
|
|
Anonymous
|
|
34.40.13.23 - - [05/Nov/2026:16:53:03 +0800] "GET /wp/wp-content/themes/pagelines/js/script.bootstrap.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Ed ...
show more
34.40.13.23 - - [05/Nov/2026:16:53:03 +0800] "GET /wp/wp-content/themes/pagelines/js/script.bootstrap.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.40.13.23 - - [05/Nov/2026:16:53:03 +0800] "GET /z9x8c7v6b5-debug-trigger-www.nonsensemakers.com HTTP/1.1" 404 39532 "https://www.nonsensemakers.com/z9x8c7v6b5-debug-trigger-www.nonsensemakers.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.40.13.23 - - [05/Nov/2026:16:53:03 +0800] "GET /wp/wp-includes/js/jquery/ui/core.min.js.map HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.40.13.23 - - [05/Nov/2026:16:53:03 +0800] "GET /wp/wp-includes/js/jquery/ui/tabs.min.js.map HTTP/1.1" 404 196 "-" "Mozi
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇩🇪
AetherFox
|
|
AetherFox VoidGuard detected: [Thu Nov 05 07:34:33.363944 2026] [authz_core:error] [pid 2112420:tid 2112425] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Thu Nov 05 07:34:33.742085 2026] [authz_c ...
show more
AetherFox VoidGuard detected: [Thu Nov 05 07:34:33.363944 2026] [authz_core:error] [pid 2112420:tid 2112425] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Thu Nov 05 07:34:33.742085 2026] [authz_core:error] [pid 2112420:tid 2112424] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/robots.txt
[Thu Nov 05 07:34:33.843840 2026] [authz_core:error] [pid 2112420:tid 2112426] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/sitemap.xml
[Thu Nov 05 07:34:34.064331 2026] [authz_core:error] [pid 2112420:tid 2112429] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/sitemap_index.xml
[Thu Nov 05 07:34:34.209754 2026] [authz_core:error] [pid 2112420:tid 2112428] [client 34.40.13.23:46676] AH01630: client denied by server configuration: proxy:https://[MASKED]/z9x8c7v6
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇬🇧
Mendip_Defender
|
|
34.40.13.23 - - [05/Nov/2026:06:20:44 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.40.13.23 - - [05/Nov/2026:06:20:44 +00 ...
show more
34.40.13.23 - - [05/Nov/2026:06:20:44 +0000] "GET /sitemap_index.xml HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.40.13.23 - - [05/Nov/2026:06:20:44 +0000] "GET /debug HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.40.13.23 - - [05/Nov/2026:06:20:44 +0000] "GET /settings/developer HTTP/1.1" 404 6499 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
...
show less
|
Hacking
Web App Attack
|
|
🇩🇪
AetherFox
|
|
AetherFox VoidGuard detected: [Thu Nov 05 06:53:08.648040 2026] [authz_core:error] [pid 67726:tid 67759] [client 34.40.13.23:59764] AH01630: client denied by server configuration: proxy:https://136.243.123.86/
[Thu Nov 05 06:53:08.650220 2026] [authz ...
show more
AetherFox VoidGuard detected: [Thu Nov 05 06:53:08.648040 2026] [authz_core:error] [pid 67726:tid 67759] [client 34.40.13.23:59764] AH01630: client denied by server configuration: proxy:https://136.243.123.86/
[Thu Nov 05 06:53:08.650220 2026] [authz_core:error] [pid 67726:tid 67759] [client 34.40.13.23:59764] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Thu Nov 05 06:53:08.762995 2026] [authz_core:error] [pid 67726:tid 67777] [client 34.40.13.23:59764] AH01630: client denied by server configuration: proxy:https://136.243.123.86/robots.txt
[Thu Nov 05 06:53:08.763096 2026] [authz_core:error] [pid 67726:tid 67777] [client 34.40.13.23:59764] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Thu Nov 05 06:53:09.640433 2026] [authz_core:error] [pid 67726:tid 67764] [client 34.40.13.23:59764] AH01630: client denied by server configuration: proxy:https://136.243.123.86/sitemap.xml
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
ConsulHosting
|
|
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
|
Web App Attack
|
|
🇩🇪
LRob
|
|
Crawler ignoring refusals | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36, Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Kimi-SearchBot/1.0 ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36, Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/) (+9 more) | path: /ngsw.json, /dist/manifest.json, /9m66q88w0o4kfx15zh0c (+17 more)
show less
|
Bad Web Bot
|
|
🇸🇪
sweplox.se
|
|
Ip 34.40.13.23 performed 'crowdsecurity/http-sensitive-files' (5 events over 28.084273ms) at 2026-11-05 03:57:22.334427698 +0000 UTC
|
Hacking
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|