๐ซ๐ฎ
sibahota
2026-10-05 13:40:36
(20 hours ago)
34.84.183.215 - - [05/Oct/2026:13:40:34 +0000] email.dexcy.in "GET /userfiles/x?path=../../.env HTTP ...
show more
34.84.183.215 - - [05/Oct/2026:13:40:34 +0000] email.dexcy.in "GET /userfiles/x?path=../../.env HTTP/2.0" 403 26 0.000 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" - - - "http://email.dexcy.in"
34.84.183.215 - - [05/Oct/2026:13:40:34 +0000] email.dexcy.in "GET /userfiles?path=../../../../proc/self/environ HTTP/2.0" 403 26 0.000 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" - - - "http://email.dexcy.in"
...
show less
Bad Web Bot
๐ฉ๐ฐ
HostingGroup
2026-10-05 09:31:54
(1 day ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 6. First blocked: 2026-10-05.
show less
Bad Web Bot
Web App Attack
๐ฎ๐ณ
Shubham Kumar
2026-10-05 07:43:01
(1 day ago)
Repeated scrape-guard abuse (flag #1)
Bad Web Bot
Anonymous
2026-10-05 07:06:35
(1 day ago)
Trying to access config files
Web App Attack
๐ฆ๐น
cybertailor
2026-10-05 06:07:15
(1 day ago)
34.84.183.215 - - [05/Oct/2026:11:07:08 +0500] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 146 "-" "Mozil ...
show more
34.84.183.215 - - [05/Oct/2026:11:07:08 +0500] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.84.183.215 - - [05/Oct/2026:11:07:11 +0500] "GET /@fs/../.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.84.183.215 - - [05/Oct/2026:11:07:11 +0500] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.84.183.215 - - [05/Oct/2026:11:07:11 +0500] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
34.84.183.215 - - [05/Oct/2026:11:07:12 +0500] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 146 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Web App Attack
Anonymous
2026-10-05 00:35:19
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-05 00:19:15
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-04 23:24:21
(1 day ago)
Web application attack detected.
Web App Attack
๐ซ๐ท
david.houstin
2026-10-04 21:03:43
(1 day ago)
34.84.183.215 - - [04/Oct/2026:23:03:34 +0200] "GET /wp-json HTTP/2.0" 404 3282 "-" "Mozilla/5.0 (co ...
show more
34.84.183.215 - - [04/Oct/2026:23:03:34 +0200] "GET /wp-json HTTP/2.0" 404 3282 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 11113 -
34.84.183.215 - - [04/Oct/2026:23:03:36 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 404 38643 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 19973 -
34.84.183.215 - - [04/Oct/2026:23:03:36 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///app/.env&environmentName=rsc HTTP/2.0" 404 35944 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 28045 -
34.84.183.215 - - [04/Oct/2026:23:03:36 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 404 35883 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 32208 -
34.84.183.215 - - [04/Oct/2026:23:03:38 +0200] "GET /api/orders/..%2fadmin/config.json HTTP/2.0" 404 288 "-
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-04 21:00:06
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.84.183.215 (215.183.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.84.183.215 (215.183.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 16:59:56.975104 2026] [security2:error] [pid 18524:tid 18524] [client 34.84.183.215:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/.htpasswd"] [unique_id "asK-TMpx8WKf2ARWVJehZAAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-04 20:51:20
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
tpjg
2026-09-19 17:38:13
(2 weeks ago)
Automated: 15 requests with error status in 120s window from 34.84.183.215.
Evidence: /htdocs/.codex ...
show more
Automated: 15 requests with error status in 120s window from 34.84.183.215.
Evidence: /htdocs/.codex/auth.json:301,/wwwroot/.codex/auth.json:301,/www/.codex/auth.json:301,/old/.codex/auth.json:301,/srv/.codex/auth.json:301,/backup/.codex/auth.json:301,/public/.codex/auth.json:301,/bak/.codex/auth.json:301,/.claude/.credentials.json:301,/.claude/credentials.json:301,/backup/.claude.json:301,/.codex/auth.json:301,/.config/claude/credentials.json:301,/.codex/config.toml:301,/.claude.json:301
show less
Web App Attack
๐ซ๐ท
900cm
2026-09-19 15:05:00
(2 weeks ago)
[Sat Sep 19 17:04:59.845594 2026] [access_compat:error] [pid 2453991:tid 2453991] [client 34.84.183. ...
show more
[Sat Sep 19 17:04:59.845594 2026] [access_compat:error] [pid 2453991:tid 2453991] [client 34.84.183.215:50904] AH01797: client denied by server configuration: /var/www/darkintruder/.codex
[Sat Sep 19 17:04:59.853929 2026] [access_compat:error] [pid 2453985:tid 2453985] [client 34.84.183.215:50926] AH01797: client denied by server configuration: /var/www/darkintruder/.claude
[Sat Sep 19 17:04:59.857633 2026] [access_compat:error] [pid 2453984:tid 2453984] [client 34.84.183.215:51004] AH01797: client denied by server configuration: /var/www/darkintruder/.claude
...
show less
Port Scan
Brute-Force
SSH