🇫🇷
Nop Nop
2026-11-06 19:38:42
UTC ·
(5 days ago)
CrowdSec ban: crowdsecurity/http-probing
Port Scan
🇺🇸
magnetosphere-tarpit
2026-11-06 18:41:17
UTC ·
(5 days ago)
Automated web scanner: repeatedly probed for .env, .git, wp-admin and PHP webshell paths that do not exist on this host. Tarpitted, then banned: 10 requests within 24h0m0s
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 17:31:12
UTC ·
(5 days ago)
Bot / seems abusive / Apache connections: 30
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇸🇪
1337v411
2026-11-06 16:58:34
UTC ·
(5 days ago)
[2026-11-06T16:58:15+00:00] uri="/sitemap.xml" ua="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
[2026-11-06T16:58:25+00:00] uri="/sitemap_index.xml" ua="Mozilla/5.0 (compatible; cohere-ai; +h ...
show more
[2026-11-06T16:58:15+00:00] uri="/sitemap.xml" ua="Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
[2026-11-06T16:58:25+00:00] uri="/sitemap_index.xml" ua="Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
[2026-11-06T16:58:34+00:00] uri="/z9x8c7v6b5-debug-trigger-boomer.se" ua="Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
show less
Bad Web Bot
Web App Attack
🇫🇷
HerrWolf
2026-11-06 16:45:04
UTC ·
(5 days ago)
CrowdSec Detection: crowdsecurity/http-admin-interface-probing
Web App Attack
🇫🇷
putputlaw
2026-11-06 15:52:43
UTC ·
(5 days ago)
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /.env.backup HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.87.55.37 - - [06/Nov/2026:15:52:42 + ...
show more
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /.env.backup HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /.env.bak HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /.env.old HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /.env.prod HTTP/2.0" 404 146 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.87.55.37 - - [06/Nov/2026:15:52:42 +0000] "GET /admin/.env HTTP/2.0" 404 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Web App Attack
🇹🇷
Jova
2026-11-06 15:04:12
UTC ·
(5 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇬🇧
neo101
2026-11-06 14:06:52
UTC ·
(5 days ago)
Secret Hunting & Credential Harvesting: Automated scanner (Unknown Bot) probed decoy secrets path '/.streamlit/secrets.toml'. Served AI System Override decoy payload as counter-measure.
Hacking
Web App Attack
🇨🇭
dalslab ltd
2026-11-06 13:55:02
UTC ·
(5 days ago)
34.87.55.37 - - [06/Nov/2026:14:54:58 +0100] "POST /graphql HTTP/1.1" 405 556 "http://remote.dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[06/Nov/2026:14:54:59 +0 ...
show more
34.87.55.37 - - [06/Nov/2026:14:54:58 +0100] "POST /graphql HTTP/1.1" 405 556 "http://remote.dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[06/Nov/2026:14:54:59 +0100] - 404 404 - GET https tracking.dalslab.com "/api/script.js.map" [Client 34.87.55.37] [Length 89] [Gzip -] [Sent-to ] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-"
34.87.55.37 - - [06/Nov/2026:14:54:59 +0100] "POST /api/graphql HTTP/1.1" 405 556 "http://remote.dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.87.55.37 - - [06/Nov/2026:14:55:00 +0100] "POST /v1/graphql HTTP/1.1" 405 556 "http://remote.dalslab.com" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.87.55.37 - - [06/Nov/2026:14:55:02 +0100]
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 13:17:17
UTC ·
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.87.55.37 (37.55.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:17:14.106811 2026] [security2:error] [pid 16173:tid 1617 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.87.55.37 (37.55.87.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 08:17:14.106811 2026] [security2:error] [pid 16173:tid 16173] [client 34.87.55.37:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.ndanetworks.com"] [uri "/.env.supabase"] [unique_id "au3TWq9pVEWEGPjpibVc3AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇵🇱
webadmin
2026-11-06 11:55:04
UTC ·
(5 days ago)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /appearance/../../proc/self/environ HTTP ...
show more
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
34.87.55.37 - - [06/Nov/2026:12:55:04 +0100] "GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2Fproc%2Fself%2Fenviron HTTP/1.1" 400 150 "-" "-" (sai.com.pl / sai.com.pl)
show less
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 11:30:02
UTC ·
(5 days ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇪🇸
masterguru
2026-11-06 10:15:23
UTC ·
(5 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "claudebot" at REQUEST_HEADERS:User-Agent. (1100000-122)
Bad Web Bot
🇫🇷
HerrWolf
2026-11-06 10:15:02
UTC ·
(5 days ago)
CrowdSec Detection: crowdsecurity/http-cve-2021-41773
Hacking
🇸🇪
1337v411
2026-11-06 09:18:26
UTC ·
(5 days ago)
[2026-11-06T09:18:26+00:00] uri="/api/uploads/../../../../.env" ua="Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
Bad Web Bot
Web App Attack