🇳🇱
Site.eu
2026-10-14 06:26:23
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-10-13 01:10:18
(4 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
🇩🇪
Mein-ChatServer
2026-10-12 22:48:13
(4 days ago)
34.95.0.151 - - [13/Oct/2026:00:48:12 +0200] "GET //.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compati ...
show more
34.95.0.151 - - [13/Oct/2026:00:48:12 +0200] "GET //.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.95.0.151 - - [13/Oct/2026:00:48:12 +0200] "GET /static../.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.95.0.151 - - [13/Oct/2026:00:48:12 +0200] "GET /assets../.env HTTP/1.1" 403 118 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Web App Attack
Bad Web Bot
🇳🇱
oisecnet
2026-10-12 21:02:18
(4 days ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-12. 1490 requests from thi ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-12. 1490 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
🇬🇧
noise.agency
2026-10-12 18:53:14
(4 days ago)
34.95.0.151 (CA/Canada/151.0.95.34.bc.googleusercontent.com), more than 10 Apache 403 hits
Hacking
🇩🇪
webanyone
2026-10-12 18:15:08
(4 days ago)
Secret file probe | method: GET | path: /css../.env | ua: Mozilla/5.0 (compatible; Hunyuan/1.0; +htt ...
show more
Secret file probe | method: GET | path: /css../.env | ua: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
show less
Hacking
Web App Attack
🇫🇷
guillaume illien
2026-10-12 17:25:15
(4 days ago)
34.95.0.151 - - [12/Oct/2026:17:25:14 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ...
show more
34.95.0.151 - - [12/Oct/2026:17:25:14 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-"
34.95.0.151 - - [12/Oct/2026:17:25:14 +0000] "GET /assets/worders_core/vendors/hyper-config-35288b5f3852159a00146c006a2eb223959ae4654758972e03e1e0dd895d6144.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.95.0.151 - - [12/Oct/2026:17:25:14 +0000] "GET /assets/timmy/controllers/index-1533eba65f144c5dd2b85fea40bbf41a3914dbb43c9caee3f68c5094edb7ebb6.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.95.0.151 - - [12/Oct/2026:17:25:14 +0000] "GET /assets/production/controllers/index-0b88f8bcfdada86e7ddcdce40441c46678a973b2e8e9226c9f21331b5e1a8757.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇳🇴
Abuse Buster
2026-10-12 17:25:14
(4 days ago)
34.95.0.151 - - [12/Oct/2026:19:25:11 +0200] "GET /robots.txt HTTP/2.0" 404 22 "-" "Mozilla/5.0 (com ...
show more
34.95.0.151 - - [12/Oct/2026:19:25:11 +0200] "GET /robots.txt HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.95.0.151 - - [12/Oct/2026:19:25:11 +0200] "GET /rtpcb4l2u5l6n59lq6z9 HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.95.0.151 - - [12/Oct/2026:19:25:11 +0200] "GET /bgqgdzxebafx8ls8k625 HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Web App Attack
🇫🇮
oh.mg
2026-10-12 17:20:28
(4 days ago)
[Mon Oct 12 19:20:28.671733 2026] [security2:error] [pid 3533711:tid 3533721] [client 34.95.0.151:0] ...
show more
[Mon Oct 12 19:20:28.671733 2026] [security2:error] [pid 3533711:tid 3533721] [client 34.95.0.151:0] [client 34.95.0.151] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "api.mmn.ca"] [uri "/"] [unique_id "as0W3A_ZxvTDSLTya8GpqAAAAMY"]
...
show less
Web App Attack
Bad Web Bot
🇪🇸
el-brujo
2026-10-12 17:08:41
(4 days ago)
Cloudflare WAF: Request Path: /exec-py Request Query: Host: api.elhacker.net userAgent: Mozilla/5.0 ...
show more
Cloudflare WAF: Request Path: /exec-py Request Query: Host: api.elhacker.net userAgent: Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html) Action: block Source: firewallManaged ASN Description: Google LLC Country: CA Method: POST Timestamp: 2026-10-12T17:08:41Z ruleId: 0e3a6828906c4b24bad318a9c953a72b. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
🇺🇸
[email protected]
2026-10-12 17:03:28
(4 days ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 71h59m59s)
Web App Attack
🇸🇪
mrmister
2026-10-12 16:54:35
(4 days ago)
Automated report from a Cowrie/web honeypot (no legitimate users). web honeypot: 373 requests. Last ...
show more
Automated report from a Cowrie/web honeypot (no legitimate users). web honeypot: 373 requests. Last seen 2026-10-12 16:27:50 UTC.
show less
Web App Attack
🇫🇷
guillaume illien
2026-10-12 16:30:33
(4 days ago)
34.95.0.151 - - [12/Oct/2026:16:30:32 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/ ...
show more
34.95.0.151 - - [12/Oct/2026:16:30:32 +0000] "POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1" 400 166 "-" "-"
34.95.0.151 - - [12/Oct/2026:16:30:32 +0000] "GET /assets/worders_users/controllers/index-0819314d6c46e4db687860dcf9727030f2ae3d5958dfa3224413be38763177c6.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.95.0.151 - - [12/Oct/2026:16:30:32 +0000] "GET /assets/worders_core/controllers/index-8764fa2d65d02fb54a03755eab60a1d178051df66e23e533da88c6d6a024b3cb.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.95.0.151 - - [12/Oct/2026:16:30:32 +0000] "GET /assets/worders_users/controllers/new_service_customer_preferred_linguists_controller-3745ba9d0bc9b553bfc6b18ef5da8ce62ea68825d8225214bff5372507fcd94f.js.map HTTP/1.1" 404 197 "-" "Mozilla/5.0 (Linux; Android 10;
...
show less
Hacking
Brute-Force
Web App Attack
SSH
🇩🇪
ghostwarriors
2026-10-12 16:20:07
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-10-12 15:54:46
(4 days ago)
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /.env::$DATA?raw HTTP/2.0" 403 294 "-" "Mozilla/5. ...
show more
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /.env::$DATA?raw HTTP/2.0" 403 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /.env.local::$DATA?raw HTTP/2.0" 403 294 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /@fs/.env?raw?? HTTP/2.0" 404 290 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /@fs/proc/self/environ?import&raw?? HTTP/2.0" 404 290 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.95.0.151 - - [12/Oct/2026:17:54:42 +0200] "GET /.env.development::$DATA?raw HTTP/2.0" 404 290 "-" "Mozilla/5.0 (compatibl
show less
Web App Attack
Hacking