🇩🇪
Philister11
2026-09-22 00:59:00
(1 day ago)
CrowdSec: crowdsecurity/http-bad-user-agent (TW/AS396982)
Bad Web Bot
Web App Attack
🇺🇸
Major Hostility
2026-09-22 00:58:51
(1 day ago)
"GET /.zshrc HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-[DOMAIN] HTTP/1.1" 404
"GET /rclone.conf H ...
show more
"GET /.zshrc HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-[DOMAIN] HTTP/1.1" 404
"GET /rclone.conf HTTP/1.1" 404
"GET /.bash_profile HTTP/1.1" 404
"GET /.profile HTTP/1.1" 404
"GET /@fs/app/.env?raw?? HTTP/1.1" 404
"GET /@fs/src/.env?raw?? HTTP/1.1" 404
"POST /graphql HTTP/1.1" 404
"GET /@fs/../.env?raw?? HTTP/1.1" 404
"GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 404
"GET /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw?? HTTP/1.1" 404
"GET /_nuxt/../.env HTTP/1.1" 404
"GET /static../.env HTTP/1.1" 404
"GET /media../.env HTTP/1.1" 404
"POST /api/graphql HTTP/1.1" 404
"GET /files../.env HTTP/1.1" 404
show less
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-22 00:42:58
(1 day ago)
2026/09/22 01:42:56 [error] 325888#325888: *1181663 access forbidden by rule, client: 104.199.175.36 ...
show more
2026/09/22 01:42:56 [error] 325888#325888: *1181663 access forbidden by rule, client: 104.199.175.36, server: [redacted], request: "GET /admin/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/09/22 01:42:56 [error] 325888#325888: *1181663 access forbidden by rule, client: 104.199.175.36, server: [redacted], request: "GET /backend/.env HTTP/2.0", host: "wiki.betatechnologies.info"
2026/09/22 01:42:56 [error] 325888#325888: *1181663 access forbidden by rule, client: 104.199.175.36, server: [redacted], request: "GET /config/.env HTTP/2.0", host: "wiki.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-21 20:32:48
(1 day ago)
104.199.175.36 - - [21/Sep/2026:21:32:46 +0100] "GET /roundcube/ssl/server.key HTTP/2.0" 404 994 "ht ...
show more
104.199.175.36 - - [21/Sep/2026:21:32:46 +0100] "GET /roundcube/ssl/server.key HTTP/2.0" 404 994 "https://webmail.betatechnologies.info/ssl/server.key" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
show less
Bad Web Bot
🇫🇷
dynamix
2026-09-21 16:35:32
(1 day ago)
Multiple WAF Violations
Web App Attack
🇩🇪
ghostwarriors
2026-09-21 15:20:09
(2 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-21 15:10:12
(2 days ago)
104.199.175.36 - - [21/Sep/2026:17:10:09 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.e ...
show more
104.199.175.36 - - [21/Sep/2026:17:10:09 +0200] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 289 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
104.199.175.36 - - [21/Sep/2026:17:10:09 +0200] "GET /settings%2F.env HTTP/2.0" 404 289 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
104.199.175.36 - - [21/Sep/2026:17:10:10 +0200] "POST /api/graphql HTTP/2.0" 404 312 "https://[site]" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
104.199.175.36 - - [21/Sep/2026:17:10:10 +0200] "GET /@fs/.env?url&raw?? HTTP/2.0" 404 289 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
104.199.175.36 - - [21/Sep/2026:17:10:10 +0200] "GET /@fs/.env?raw&url?? HTTP/2.0" 404 289 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
104.199.175.36 - - [21/Sep/2026:17:10:10 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///proc/self/environ&env
show less
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-21 14:49:20
(2 days ago)
Automated web vulnerability and path enumeration scan with excessive 404 requests
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-21 14:19:23
(2 days ago)
This address requests our sites over plain http, is answered with a redirect to https, and never fol ...
show more
This address requests our sites over plain http, is answered with a redirect to https, and never follows it — over and over. A browser follows redirects; a scanner enumerating hosts does not. It reads nothing it asks for and only loads the server; blocked. Please check what runs on this address. | method: GET | path: / | 2026-09-21 14:19 UTC
show less
Bad Web Bot
🇬🇧
consul.to
2026-09-21 12:57:47
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-09-21 12:35:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇮🇹
Progetto1
2026-09-21 12:30:03
(2 days ago)
Multiple exploit attempts
Hacking
Brute-Force
Exploited Host
Web App Attack
🇨🇭
Origon
2026-09-21 12:15:18
(2 days ago)
http-probing - IP: 104.199.175.36 - time="2026-09-21T14:15:18+02:00" level=info msg="(555f66b4f6a74 ...
show more
http-probing - IP: 104.199.175.36 - time="2026-09-21T14:15:18+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 104.199.175.36 (TW/396982) : 4h ban on Ip 104.199.175.36" module=db
show less
Web App Attack
🇫🇷
Lunix
2026-09-21 12:11:36
(2 days ago)
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-09-21 12:00:50
(2 days ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.199.175.36 - - [21/Sep/2026:14:00:31 +0200] "GET /.env.development?import&raw HTTP/2.0" 404 2004 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Bad Web Bot
Web App Attack