🇩🇪
Marc
2026-08-30 07:26:04
(1 hour ago)
104.199.148.168 - - [30/Aug/2026:09:26:04 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.e ...
show more
104.199.148.168 - - [30/Aug/2026:09:26:04 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252fapp/.env?raw?? HTTP/1.1" 404 2042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.1020.18 Safari/537.36; compatible; Twitterbot/1.0" 104.199.148.168 - - [30/Aug/2026:09:26:04 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 2042 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Google-Extended/1.0; +http://www.google.com/bot.html" 104.199.148.168 - - [30/Aug/2026:09:26:04 +0200] "GET /@fs/root/.aws/credentials.backup?raw?? HTTP/1.1" 404 2042 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6455.73 Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot"
show less
Brute-Force
🇺🇸
TAY
2026-08-30 07:10:54
(1 hour ago)
104.199.148.168 - - [30/Aug/2026:15:10:39 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2598 "-" "Moz ...
show more
104.199.148.168 - - [30/Aug/2026:15:10:39 +0800] "GET /@fs/../.env?raw?? HTTP/1.1" 404 2598 "-" "Mozilla/5.0 (compatible; LinkedInBot/1.0; +http://www.linkedin.com)"
104.199.148.168 - - [30/Aug/2026:15:10:39 +0800] "GET /@fs/../../.env?raw?? HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (Linux; Android 15; SM-S918B) AppleWebKit/537.36 (KHTML, like Gecko; compatible; GrokBot/1.0; +https://x.ai/grokbot) Chrome/151.0.4419.24 Mobile Safari/537.36"
104.199.148.168 - - [30/Aug/2026:15:10:53 +0800] "GET /@fs/../../../../../app/.env?raw?? HTTP/1.1" 400 2605 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; facebookexternalhit/1.1; +http://www.facebook.com/externalhit_uatext.php"
104.199.148.168 - - [30/Aug/2026:15:10:53 +0800] "GET /@fs/../../../../../proc/self/environ?raw?? HTTP/1.1" 400 2589 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_0 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/148.0.636.168 Mobile Safari/537.36; compatible; Amzn-SearchBot/1.0; +https://developer.a
...
show less
Brute-Force
🇺🇸
WellSpring
2026-08-30 05:29:27
(3 hours ago)
env leak on 319.today/@fs/var/www/html/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇮🇹
CoreTech srl
2026-08-30 04:28:56
(4 hours ago)
cloudlinux2 fail2ban: 2026-08-30 06:24:06,203 fail2ban.filter [1459]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-30 06:24:06,203 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,301 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,256 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,280 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,231 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,320 fail2ban.filter [1459]: INFO [plesk-modsecurity] Found 104.199.148.168 - 2026-08-30 06:24:06cloudlinux2 fail2ban: 2026-08-30 06:24:06,404 fail2ban.filter [1459]: INFO [recidive] Found 104.199.148.168 - 2026-08-3
show less
Brute-Force
🇳🇿
Antinson
2026-08-30 04:28:39
(4 hours ago)
Scraping with a high error ratio and request rate
Bad Web Bot
🇸🇪
vaia.cloud
2026-08-30 03:00:06
(5 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-08-30 02:47:52
(5 hours ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
WeCloudit-Anti-Abuse
2026-08-30 02:13:31
(6 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
macrob
2026-08-29 23:46:43
(8 hours ago)
2026/08/29 23:46:42 [error] 528106#528106: *534971199 access forbidden by rule, client: 104.199.148. ...
show more
2026/08/29 23:46:42 [error] 528106#528106: *534971199 access forbidden by rule, client: 104.199.148.168, server: fastcredit.net.ua, request: "GET /@fs/home/node/.aws/credentials?raw?? HTTP/2.0", host: "fastcredit.net.ua"
2026/08/29 23:46:42 [error] 528104#528104: *534971504 access forbidden by rule, client: 104.199.148.168, server: fastcredit.net.ua, request: "GET /@fs/.env?raw?? HTTP/2.0", host: "fastcredit.net.ua"
2026/08/29 23:46:42 [error] 528103#528103: *534971576 access forbidden by rule, client: 104.199.148.168, server: fastcredit.net.ua, request: "GET /@fs/.env.production?raw?? HTTP/2.0", host: "fastcredit.net.ua"
...
show less
Web App Attack
Anonymous
2026-08-29 23:31:21
(9 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇮🇹
mediarama.com
2026-08-29 22:58:22
(9 hours ago)
Banned by Fail2Ban
Web App Attack
🇧🇪
webbie
2026-08-29 22:52:50
(9 hours ago)
104.199.148.168 - - [30/Aug/2026:00:52:49 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 404 1795 "-" "Moz ...
show more
104.199.148.168 - - [30/Aug/2026:00:52:49 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 404 1795 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; +https://www.anthropic.com/claude-searchbot)"
104.199.148.168 - - [30/Aug/2026:00:52:49 +0200] "GET /@fs/root/.env?raw?? HTTP/1.1" 404 1795 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_6_1) AppleWebKit/605.1.15 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user) Version/19.4 Safari/605.1.15"
104.199.148.168 - - [30/Aug/2026:00:52:49 +0200] "GET /@fs/proc/self/environ?raw?? HTTP/1.1" 404 1795 "-" "Mozilla/5.0 (compatible; TelegramBot/1.0)"
104.199.148.168 - - [30/Aug/2026:00:52:49 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 1795 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.7391.235 Mobile Safari/537.36; compatible; ClaudeBot/1.0; [email protected] "
104.199.148.168 - - [30/Aug/2026:00:52:49 +0
...
show less
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-29 22:01:28
(10 hours ago)
Auto-ban: >3000 req/min op 2026-08-29
Web App Attack
SSH
Hacking
🇳🇱
debestelapp
2026-08-29 21:30:08
(11 hours ago)
Web App Attack
🇩🇪
ghostwarriors
2026-08-29 20:20:38
(12 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack