🇳🇱
homeshowdomain.nl
2026-06-10 21:59:44
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇩🇪
curiosity
2026-06-10 20:15:22
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
🇳🇱
e.fierstra
2026-06-10 15:06:08
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
wlt-blocker
2026-06-10 14:43:19
(1 week ago)
Unauthorized access to webpage admin
Web App Attack
2026-06-10 05:35:06
(1 week ago)
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.bak HTTP/1.1" 403 7629 "-" "Mozilla/5.0 ...
show more
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.bak HTTP/1.1" 403 7629 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 11_0 like Mac OS X) AppleWebKit/604.1.38 (KHTML, like Gecko) Version/11.0 Mobile/15A356 Safari/604.1"
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.production.bak HTTP/1.1" 403 7629 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.7; rv:20.0) Gecko/20100101 Firefox/20.0"
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.save HTTP/1.1" 403 7629 "-" "Mozilla/5.0 (Linux; U; Android 8.1.0; zh-CN; Mi Note 3 Build/OPM1.171019.019) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/57.0.2987.108 UCBrowser/12.5.9.1039 Mobile Safari/537.36"
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.staging HTTP/1.1" 403 7629 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.84 Safari/537.36"
104.199.119.237 - - [10/Jun/2026:07:35:00 +0200] "GET /.env.uat HTTP/1.1" 403 7629 "-" "Mozilla/
...
show less
DDoS Attack
🇬🇧
thetomtaylor.co.uk
2026-06-10 01:08:02
(1 week ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
2026-06-10 00:59:37
(1 week ago)
Aggressive web scan
Web App Attack
🇫🇷
masterguru
2026-06-09 14:35:54
(1 week ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.199.119.237 (US/United States/237 ...
show more
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 104.199.119.237 (US/United States/237.119.199.104.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
show less
Hacking
🇩🇪
updown.io
2026-06-09 14:30:43
(1 week ago)
{"level":"info","ts":1781015440.5181723,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781015440.5181723,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"104.199.119.237","remote_port":"43968","client_ip":"104.199.119.237","proto":"HTTP/1.1","method":"GET","host":"lkupdate.cbaupdate.yxwvutsrqtsrqpkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.save","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.1; en-us; sdk Build/MR1) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.1 Safari/534.30"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000044866,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://lkupdate.cbaupdate.yxwvutsrqtsrqpkjihgfedcbwwwc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.save"],"Content-Type":[]}}
{"level":"info","ts":1781015440.6338372,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_
...
show less
DDoS Attack
Web App Attack
🇬🇧
Oakley
2026-06-09 13:43:26
(1 week ago)
(confirmed_bot_sig) Confirmed bot
Hacking
2026-06-09 13:43:24
(1 week ago)
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.demo HTTP/1.1" 404 54705 "-" "Mozilla/5. ...
show more
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.demo HTTP/1.1" 404 54705 "-" "Mozilla/5.0 (Linux; U; Android 6.0; he-il; Redmi Note 4X Build/MRA58K) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/71.0.3578.141 Mobile Safari/537.36 XiaoMi/MiuiBrowser/10.9.7-g"
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.live HTTP/1.1" 404 54889 "-" "Mozilla/5.0 (X11; OpenBSD i386) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/36.0.1985.125 Safari/537.36"
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.preprod HTTP/1.1" 404 54889 "-" "Mozilla/5.0 (X11; Linux i686; rv:20.0) Gecko/20100101 Firefox/20.0"
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.production.bak HTTP/1.1" 404 54889 "-" "Mozilla/5.0 (X11; Linux) KHTML/4.9.1 (like Gecko) Konqueror/4.9"
104.199.119.237 - - [09/Jun/2026:15:43:12 +0200] "GET /.env.test HTTP/1.1" 404 54890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/67.0.3396.99 Sa
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Aetherweb Ark
2026-06-09 12:37:18
(1 week ago)
(mod_security) mod_security (id:949110) triggered by 104.199.119.237 (US/United States/237.119.199.1 ...
show more
(mod_security) mod_security (id:949110) triggered by 104.199.119.237 (US/United States/237.119.199.104.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇳🇱
Site.eu
2026-06-09 11:06:03
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇮🇪
tarlabs
2026-06-09 10:22:38
(1 week ago)
IP banned by Fail2Ban (traefik jail)
Web App Attack
🇩🇪
Ba-Yu
2026-06-09 09:08:36
(1 week ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack