๐ฎ๐ณ
evicky2002
2026-08-14 06:00:12
(1 week ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ง๐ฌ
alnaasd
2026-08-10 13:27:07
(1 week ago)
WAF block action triggered by rule set "Version Control - Information Disclosure" (24 occurrences ob ...
show more
WAF block action triggered by rule set "Version Control - Information Disclosure" (24 occurrences observed).
show less
Web App Attack
๐ซ๐ท
GEDAL
2026-08-10 05:21:28
(1 week ago)
Fail2ban webexploits @ <hostname> : 34.154.255.130 - - [04/Aug/2026:21:04:55 +0200] "GET /.git/confi ...
show more
Fail2ban webexploits @ <hostname> : 34.154.255.130 - - [04/Aug/2026:21:04:55 +0200] "GET /.git/config HTTP/2.0" 301 162 "-" "anthropic-ai"
show less
Brute-Force
SSH
๐ฌ๐ง
consul.to
2026-08-09 08:28:46
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
Baking333
2026-08-07 08:20:54
(1 week ago)
[redacted] 34.154.255.130 - - [07/Aug/2026:09:20:52 +0100] "GET /.aws/config HTTP/1.1" 302 1544 0/35 ...
show more
[redacted] 34.154.255.130 - - [07/Aug/2026:09:20:52 +0100] "GET /.aws/config HTTP/1.1" 302 1544 0/35020 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [07/Aug/2026:09:20:52 +0100] "GET /.aws/credentials HTTP/1.1" 302 6763 0/37501 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-07 06:12:00
(2 weeks ago)
[redacted] 34.154.255.130 - - [07/Aug/2026:07:11:59 +0100] "GET /.aws/config HTTP/1.1" 302 6763 0/31 ...
show more
[redacted] 34.154.255.130 - - [07/Aug/2026:07:11:59 +0100] "GET /.aws/config HTTP/1.1" 302 6763 0/31743 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [07/Aug/2026:07:11:59 +0100] "GET /.aws/credentials HTTP/1.1" 302 6763 0/35839 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-07 04:09:29
(2 weeks ago)
[redacted] 34.154.255.130 - - [07/Aug/2026:05:09:27 +0100] "GET /.github/.env HTTP/1.1" 302 1544 0/4 ...
show more
[redacted] 34.154.255.130 - - [07/Aug/2026:05:09:27 +0100] "GET /.github/.env HTTP/1.1" 302 1544 0/41248 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [07/Aug/2026:05:09:27 +0100] "GET / HTTP/1.1" 200 7905 0/60437 "https://[redacted]/.github/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-07 02:01:40
(2 weeks ago)
[redacted] 34.154.255.130 - - [07/Aug/2026:03:01:39 +0100] "GET /.aws/credentials HTTP/1.1" 302 6763 ...
show more
[redacted] 34.154.255.130 - - [07/Aug/2026:03:01:39 +0100] "GET /.aws/credentials HTTP/1.1" 302 6763 0/120254 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [07/Aug/2026:03:01:39 +0100] "GET /.git/config HTTP/1.1" 302 6763 0/123905 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Philister11
2026-08-07 00:54:51
(2 weeks ago)
CrowdSec: crowdsecurity/http-admin-interface-probing (IT/AS396982)
Web App Attack
Hacking
๐ซ๐ท
Baking333
2026-08-06 23:50:19
(2 weeks ago)
[redacted] 34.154.255.130 - - [07/Aug/2026:00:50:16 +0100] "GET /.github/.env HTTP/1.1" 302 1544 0/1 ...
show more
[redacted] 34.154.255.130 - - [07/Aug/2026:00:50:16 +0100] "GET /.github/.env HTTP/1.1" 302 1544 0/198815 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [07/Aug/2026:00:50:17 +0100] "GET / HTTP/1.1" 200 7903 0/229951 "https://[redacted]/.github/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-06 23:01:19
(2 weeks ago)
[redacted] 34.154.255.130 - - [06/Aug/2026:22:43:39 +0100] "GET / HTTP/1.1" 200 7903 0/114376 "https ...
show more
[redacted] 34.154.255.130 - - [06/Aug/2026:22:43:39 +0100] "GET / HTTP/1.1" 200 7903 0/114376 "https://[redacted]/[redacted]" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [06/Aug/2026:22:43:39 +0100] "GET / HTTP/1.1" 200 7902 0/108111 "https://[redacted]/[redacted]" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-06 21:43:40
(2 weeks ago)
[redacted] 34.154.255.130 - - [06/Aug/2026:22:43:38 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/158 ...
show more
[redacted] 34.154.255.130 - - [06/Aug/2026:22:43:38 +0100] "GET /[redacted] HTTP/1.1" 302 6763 0/158047 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [06/Aug/2026:22:43:38 +0100] "GET /[redacted] HTTP/1.1" 302 1544 0/168267 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-08-06 19:31:07
(2 weeks ago)
[redacted] 34.154.255.130 - - [06/Aug/2026:20:31:04 +0100] "GET /laravel/.env HTTP/1.1" 302 6783 0/7 ...
show more
[redacted] 34.154.255.130 - - [06/Aug/2026:20:31:04 +0100] "GET /laravel/.env HTTP/1.1" 302 6783 0/78525 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0" [redacted] 34.154.255.130 - - [06/Aug/2026:20:31:04 +0100] "GET /config/.[redacted] HTTP/1.1" 302 6783 0/76260 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; MistralAI-User/1.0"
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-06 19:10:09
(2 weeks ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ญ๐บ
DumaNet
2026-08-06 14:04:00
(2 weeks ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 06. 15:35:28
Source IP: 34.154 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 06. 15:35:28
Source IP: 34.154.255.130
Portion of the log(s):
34.154.255.130 - [06/Aug/2026:15:35:24 +0200] "GET /.hermes/auth.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.154.255.130 - [06/Aug/2026:15:35:24 +0200] "GET /.hermes/config.yaml HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.154.255.130 - [06/Aug/2026:15:35:24 +0200] "GET /.aider.conf.yml HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.154.255.130 - [06/Aug/2026:15:35:24 +0200] "GET /.codex/config.toml HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
34.154.255.130 - [06/Aug/2026:15:35:24 +0200] "GET /.cursor/mcp.json HTTP/1.1" 404 153
show less
Web App Attack