Anonymous
2026-10-21 13:00:00
(19 hours ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-21 03:47:17
(1 day ago)
IVski WAF | Webshell probe detected - requesting common script extensions
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-19 22:14:33
(2 days ago)
Brute-Force
Web App Attack
Anonymous
2026-10-19 13:45:18
(2 days ago)
Observed scanned 351 known-sensitive endpoint(s), e.g.: /, /%2Fadmin, /%2Fapi/config, /%2Fdashboard, ...
show more
Observed scanned 351 known-sensitive endpoint(s), e.g.: /, /%2Fadmin, /%2Fapi/config, /%2Fdashboard, /%2Fsettings, /%2eenv
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-19 11:24:28
(2 days ago)
IVski WAF | Sensitive file probe - looking for exposed .env.js
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-19 08:27:39
(3 days ago)
"GET /.env.development?import&raw HTTP/1.1"
Hacking
Web App Attack
Anonymous
2026-10-19 05:34:03
(3 days ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /firebase-admin.json
Bad Web Bot
Web App Attack
๐ฌ๐ง
Marten Mark
2026-10-19 04:19:40
(3 days ago)
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" " ...
show more
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "POST /lib/terminal-xhr.php HTTP/2.0" 404 110 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "GET /dist/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "GET /build/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
104.199.137.124 - - [19/Oct/2026:04:19:38 +0000] "GET /.vite/manifest.json HTTP/2.0" 404 5334 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobil
...
show less
Port Scan
Web App Attack
๐ฉ๐ช
macrob
2026-10-19 04:10:57
(3 days ago)
2026/10/19 04:10:55 [error] 1850001#1850001: *13382632 access forbidden by rule, client: 104.199.137 ...
show more
2026/10/19 04:10:55 [error] 1850001#1850001: *13382632 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "forum.fastcredit.net.ua"
2026/10/19 04:10:55 [error] 1850001#1850001: *13382635 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "forum.fastcredit.net.ua"
2026/10/19 04:10:56 [error] 1850001#1850001: *13382635 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /.gitlab-ci.yml HTTP/2.0", host: "forum.fastcredit.net.ua"
...
show less
Web App Attack
๐ช๐ธ
robotstxt
2026-10-19 03:18:29
(3 days ago)
104.199.137.124 - - [19/Oct/2026:03:17:58 +0000] "GET /.npmrc HTTP/2.0" 403 16232 "https://nl.tempor ...
show more
104.199.137.124 - - [19/Oct/2026:03:17:58 +0000] "GET /.npmrc HTTP/2.0" 403 16232 "https://nl.temporada-alta.com/.npmrc" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.199.137.124 - - [19/Oct/2026:03:17:58 +0000] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 16247 "https://nl.temporada-alta.com/.github/workflows/deploy.yml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
104.199.137.124 - - [19/Oct/2026:03:17:59 +0000] "GET /.htpasswd HTTP/2.0" 403 16232 "https://nl.temporada-alta.com/.htpasswd" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
104.199.137.124 - - [19/Oct/2026:03:17:59 +0000] "GET /.dev.vars HTTP/2.0" 403 16234 "https://nl.temporada-alta.com/.dev.vars" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
104.199.137.124 - - [19/Oct/2026:03:18:02 +0000] "GET /.firebaserc HT
...
show less
Web App Attack
๐ณ๐ฑ
BlueWire Hosting
2026-10-19 03:10:02
(3 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐บ๐ธ
helios.live
2026-10-19 02:57:05
(3 days ago)
2026/10/19 02:57:03 [error] 1542672#1542672: *1419588 access forbidden by rule, client: 104.199.137. ...
show more
2026/10/19 02:57:03 [error] 1542672#1542672: *1419588 access forbidden by rule, client: 104.199.137.124, server: kocerroxy.com, request: "GET /dist/.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/10/19 02:57:03 [error] 1542672#1542672: *1419807 access forbidden by rule, client: 104.199.137.124, server: kocerroxy.com, request: "GET /.vite/manifest.json HTTP/1.1", host: "app.kocerroxy.com"
2026/10/19 02:57:04 [error] 1542673#1542673: *1419820 access forbidden by rule, client: 104.199.137.124, server: kocerroxy.com, request: "GET /.gitlab-ci.yml HTTP/1.1", host: "app.kocerroxy.com"
2026/10/19 02:57:04 [error] 1542673#1542673: *1419820 access forbidden by rule, client: 104.199.137.124, server: kocerroxy.com, request: "GET /.env.supabase HTTP/1.1", host: "app.kocerroxy.com"
2026/10/19 02:57:05 [error] 1542672#1542672: *1419828 access forbidden by rule, client: 104.199.137.124, server: kocerroxy.com, request: "GET /.dev.vars HTTP/1.1", host: "app.kocerroxy.com"
...
show less
Web App Attack
๐ฉ๐ช
macrob
2026-10-19 01:25:25
(3 days ago)
2026/10/19 01:25:23 [error] 1850002#1850002: *12993303 access forbidden by rule, client: 104.199.137 ...
show more
2026/10/19 01:25:23 [error] 1850002#1850002: *12993303 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /z9x8c7v6b5-debug-trigger-admin.fastcredit.net.ua HTTP/2.0", host: "admin.fastcredit.net.ua"
2026/10/19 01:25:23 [error] 1850003#1850003: *12993304 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "admin.fastcredit.net.ua"
2026/10/19 01:25:24 [error] 1850002#1850002: *12993303 access forbidden by rule, client: 104.199.137.124, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "admin.fastcredit.net.ua"
...
show less
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-19 01:02:26
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฌ๐ง
andypiper
2026-10-19 01:01:58
(3 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack