๐บ๐ธ
ruusvuu
2026-08-13 19:34:15
(1 week ago)
Automated abuse report: 15 attack/probe requests from Google LLC / TW.
Targeted paths: /@fs/proc/sel ...
show more
Automated abuse report: 15 attack/probe requests from Google LLC / TW.
Targeted paths: /@fs/proc/self/environ, /@fs/etc/passwd, /static../etc/passwd, /media../etc/passwd, /files../etc/passwd.
Sample log lines:
[nafco] 2026-08-13T19:34:15.015Z 34.81.42.223 - GET /aws/credentials 404 - - 10.552 ms ref="-"
[nafco] 2026-08-13T19:34:15.142Z 34.81.42.223 - GET /proc/self/environ 404 - - 3.217 ms ref="-"
[nafco] 2026-08-13T19:34:15.152Z 34.81.42.223 - GET /actuator/env 404 - - 98.295 ms ref="-"
Detected by an automated web-server log monitor.
show less
Web App Attack
๐ฎ๐น
VHosting
2026-08-13 15:25:03
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ต๐ฑ
strefapi_com
2026-08-13 13:06:49
(1 week ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
gadix
2026-08-13 05:00:30
(1 week ago)
[13/Aug/2026:07:00:28.041022 +0200] an1PbNCMEQZENFlWQf3QtQAAAEM 34.81.42.223 47460 127.0.0.1 7081
[1 ...
show more
[13/Aug/2026:07:00:28.041022 +0200] an1PbNCMEQZENFlWQf3QtQAAAEM 34.81.42.223 47460 127.0.0.1 7081
[13/Aug/2026:07:00:28.058014 +0200] an1PbEIyz5TTlPDvPbZIkgAAABM 34.81.42.223 47492 127.0.0.1 7081
[13/Aug/2026:07:00:28.060546 +0200] an1PbEIyz5TTlPDvPbZIlAAAABI 34.81.42.223 47484 127.0.0.1 7081
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-13 04:58:22
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐ฆ๐บ
aranguren.org
2026-08-13 03:08:39
(1 week ago)
34.81.42.223 - - [13/Aug/2026:13:08:38 +1000] "GET /static../etc/passwd HTTP/1.1" 404 1176 "https:// ...
show more
34.81.42.223 - - [13/Aug/2026:13:08:38 +1000] "GET /static../etc/passwd HTTP/1.1" 404 1176 "https://torrage.luisaranguren.com/static../etc/passwd" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)"
34.81.42.223 - - [13/Aug/2026:13:08:38 +1000] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 1204 "https://torrage.luisaranguren.com/@fs/proc/self/environ?raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.81.42.223 - - [13/Aug/2026:13:08:38 +1000] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 404 1230 "https://torrage.luisaranguren.com/@fs/home/ec2-user/.aws/credentials?raw??" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)"
34.81.42.223 - - [13/Aug/2026:13:08:38 +1000] "GET /@fs/proc/self/environ HTTP/1.1" 404 1180 "https://torrage.luisaranguren.com/@fs/proc/self/environ" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Chat
...
show less
Bad Web Bot
๐บ๐ธ
natdem.org
2026-08-13 02:21:43
(1 week ago)
Web: .env file probe, AWS credentials probe, Path traversal (../)
Web App Attack
Hacking
๐ฒ๐พ
Rizzy
2026-08-12 22:35:47
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ช๐ธ
alferez
2026-08-12 21:16:25
(1 week ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐ท๐ด
iulianh
2026-08-12 20:28:39
(1 week ago)
80,443
Brute-Force
SSH
๐ฉ๐ช
4server
2026-08-12 20:26:56
(1 week ago)
[WedAug1222:26:52.0223532026][security2:error][pid3487180:tid3487201][client34.81.42.223:0]ModSecuri ...
show more
[WedAug1222:26:52.0223532026][security2:error][pid3487180:tid3487201][client34.81.42.223:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"mail.danielasilvia.ch\"][uri\"/@fs/root/.aws/credentials\"][unique_id\"anzXDGBMAxDhXdIxiWY_LgAAARE\"]
show less
Port Scan
Brute-Force
Web App Attack
Anonymous
2026-08-12 20:11:51
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.81.42.223 (TW/Taiwan/223.42.81.34.bc ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.81.42.223 (TW/Taiwan/223.42.81.34.bc.googleusercontent.com)
show less
SQL Injection
๐ฉ๐ช
BlueWire Hosting
2026-08-12 19:36:40
(1 week ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฉ๐ช
Hazzard
2026-08-12 19:14:24
(1 week ago)
(PERMBLOCK) 34.81.42.223 (TW/Taiwan/Taipei City/Taipei/223.42.81.34.bc.googleusercontent.com/[redact ...
show more
(PERMBLOCK) 34.81.42.223 (TW/Taiwan/Taipei City/Taipei/223.42.81.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
Anonymous
2026-08-12 19:05:34
(1 week ago)
34.81.42.223 - - [12/Aug/2026:14:05:32 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWeb ...
show more
34.81.42.223 - - [12/Aug/2026:14:05:32 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" 34.81.42.223
34.81.42.223 - - [12/Aug/2026:14:05:32 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.81.42.223
34.81.42.223 - - [12/Aug/2026:14:05:33 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)" 34.81.42.223
34.81.42.223 - - [12/Aug/2026:14:05:33 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.81.42.223
34.81.42.223 - - [12/Aug/2026:14:05:33 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 34.81.42.223
34.
...
show less
Brute-Force
Bad Web Bot
Web App Attack