🇦🇺
aranguren.org
2026-09-06 10:29:19
(1 day ago)
86.237.114.248 - - [06/Sep/2026:20:29:14 +1000] "GET /.env HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.23 ...
show more
86.237.114.248 - - [06/Sep/2026:20:29:14 +1000] "GET /.env HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.237.114.248 - - [06/Sep/2026:20:29:14 +1000] "GET /v1/models HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.237.114.248 - - [06/Sep/2026:20:29:16 +1000] "GET /api/tags HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.237.114.248 - - [06/Sep/2026:20:29:18 +1000] "POST /v1/messages HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.237.114.248 - - [06/Sep/2026:20:29:19 +1000] "GET /system_stats HTTP/1.1" 404 986 "-" "Mozilla/5.0"
86.237.114.248 - - [06/Sep/2026:20:29:19 +1000] "GET /object_info HTTP/1.1" 404 986 "-" "Mozilla/5.0"
...
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-06 10:23:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 86.237.114.248 (lfbn-mar-1-147-248.w86-237.abo. ...
show more
(mod_security) mod_security (id:210492) triggered by 86.237.114.248 (lfbn-mar-1-147-248.w86-237.abo.wanadoo.fr): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 06:23:06.936505 2026] [security2:error] [pid 9441:tid 9441] [client 86.237.114.248:64542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.209"] [uri "/.env"] [unique_id "ap0_CkGT31-VuaBEAHe6xQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 09:24:31
(1 day ago)
[ns31.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.local | /.env.stagin ...
show more
[ns31.kdns.gr] httpd-config-scan: logs=/var/log/httpd/access_log; samples=/.env.local | /.env.staging | /.env.production
show less
Hacking
Web App Attack
Anonymous
2026-09-05 11:49:57
(2 days ago)
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 59539 | TTL: 117 | LEN: 52 | TOS: 0x00 • ...
show more
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 59539 | TTL: 117 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-08-21 12:01:50
(2 weeks ago)
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 64378 | TTL: 117 | LEN: 52 | TOS: 0x00 • ...
show more
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 64378 | TTL: 117 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
Anonymous
2026-08-09 19:12:25
(4 weeks ago)
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 17320 | TTL: 117 | LEN: 52 | TOS: 0x00 • ...
show more
Blocked by firewall on hugin [11434/tcp] | Rule: UFW | SPT: 17320 | TTL: 117 | LEN: 52 | TOS: 0x00 • Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
🇫🇷
evvsk
2026-08-09 17:48:07
(4 weeks ago)
11434/tcp
Port Scan
🇺🇸
heyzg
2026-08-09 16:37:02
(4 weeks ago)
API LLMjacking (Ollama) (observed): 21 HTTP, 1s; attempted outbound scan & cryptomining; Ollama: /ap ...
show more
API LLMjacking (Ollama) (observed): 21 HTTP, 1s; attempted outbound scan & cryptomining; Ollama: /api/tags,/v1/models,/api/chat
show less
Hacking
Web App Attack
🇯🇵
Execoop
2026-08-09 16:36:47
(4 weeks ago)
API LLMjacking (Ollama) (observed): 21 HTTP, 2s; attempted outbound scan & cryptomining; Ollama: /ap ...
show more
API LLMjacking (Ollama) (observed): 21 HTTP, 2s; attempted outbound scan & cryptomining; Ollama: /api/tags,/v1/models,/api/chat
show less
Hacking
Web App Attack
🇺🇸
Execoop
2026-08-09 10:48:10
(4 weeks ago)
API LLMjacking (Ollama) (observed): 1 HTTP; attempted cryptomining; Ollama: /v1/chat/completions
Hacking
Web App Attack
🇸🇬
heyzg
2026-08-09 10:48:02
(4 weeks ago)
API LLMjacking (Ollama) (observed): 1 HTTP; attempted cryptomining; Ollama: /v1/chat/completions
Hacking
Web App Attack