๐ฉ๐ช
cvb
2026-06-06 10:43:12
(4 hours ago)
[Sat Jun 06 12:43:08.190396 2026] [authz_core:error] [pid 22503:tid 22503] [client 129.121.87.60:481 ...
show more
[Sat Jun 06 12:43:08.190396 2026] [authz_core:error] [pid 22503:tid 22503] [client 129.121.87.60:48168] AH01630: client denied by server configuration: /var/www/asset/public/.env
[Sat Jun 06 12:43:09.052113 2026] [authz_core:error] [pid 18830:tid 18830] [client 129.121.87.60:48110] AH01630: client denied by server configuration: /var/www/asset/public/uploads/.env
[Sat Jun 06 12:43:09.312619 2026] [authz_core:error] [pid 18867:tid 18867] [client 129.121.87.60:48154] AH01630: client denied by server configuration: /var/www/asset/public/.env
[Sat Jun 06 12:43:12.165049 2026] [authz_core:error] [pid 18865:tid 18865] [client 129.121.87.60:48172] AH01630: client denied by server configuration: /var/www/asset/public/.env
[Sat Jun 06 12:43:12.165163 2026] [authz_core:error] [pid 18830:tid 18830] [client 129.121.87.60:48110] AH01630: client denied by server configuration: /var/www/asset/public/.env
[Sat Jun 06 12:43:12.165163 2026] [authz_core:error] [pid 18800:tid 18800] [client 129.121.87.60:
... RK-Cloud
show less
Brute-Force
Web App Attack
๐ซ๐ท
Catalin Negru
2026-06-05 06:46:28
(1 day ago)
2026-05-20 19:08:26,207 fail2ban.actions [671]: NOTICE [web-scanner] Ban 129.121.87.60
2026- ...
show more
2026-05-20 19:08:26,207 fail2ban.actions [671]: NOTICE [web-scanner] Ban 129.121.87.60
2026-05-20 19:08:26,695 fail2ban.actions [671]: NOTICE [apache-404] Ban 129.121.87.60
2026-05-20 19:08:26,695 fail2ban.actions [671]: NOTICE [apache-dirscan] Ban 129.121.87.60
2026-05-20 19:08:26,745 fail2ban.actions [671]: NOTICE [laravel-env] Ban 129.121.87.60
2026-05-20 19:08:27,105 fail2ban.actions [671]: NOTICE [laravel-auth] Ban 129.121.87.60
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
LRob.fr
2026-06-02 19:30:05
(3 days ago)
Repeated 404 errors, blocked by Fail2ban in custom-404 jail
Bad Web Bot
๐ฌ๐ง
Andrew
2026-06-02 17:14:45
(3 days ago)
129.121.87.60 - - [02/Jun/2026:17:14:43 +0000] "GET /login HTTP/1.1" 404 20271 "-" "Mozilla/5.0 (X11 ...
show more
129.121.87.60 - - [02/Jun/2026:17:14:43 +0000] "GET /login HTTP/1.1" 404 20271 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
129.121.87.60 - - [02/Jun/2026:17:14:43 +0000] "GET /filament/login HTTP/1.1" 404 18359 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
129.121.87.60 - - [02/Jun/2026:17:14:43 +0000] "GET /panel/login HTTP/1.1" 404 20277 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
129.121.87.60 - - [02/Jun/2026:17:14:43 +0000] "GET /auth/login HTTP/1.1" 404 18360 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
129.121.87.60 - - [02/Jun/2026:17:14:44 +0000] "GET /app/login HTTP/1.1" 404 18359 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36"
129.121.87.60 - - [02/Jun/2026:17:14:44 +
...
show less
Hacking
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-02 17:04:15
(3 days ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐บ๐ธ
helios.live
2026-06-02 14:43:21
(4 days ago)
2026/06/02 14:43:20 [error] 2871073#2871073: *1625646 access forbidden by rule, client: 129.121.87.6 ...
show more
2026/06/02 14:43:20 [error] 2871073#2871073: *1625646 access forbidden by rule, client: 129.121.87.60, server: kocervpn.com, request: "POST /.env HTTP/1.1", host: "kocervpn.com"
2026/06/02 14:43:20 [error] 2871073#2871073: *1625632 access forbidden by rule, client: 129.121.87.60, server: kocervpn.com, request: "POST /app/.env HTTP/1.1", host: "kocervpn.com"
2026/06/02 14:43:21 [error] 2871073#2871073: *1625632 access forbidden by rule, client: 129.121.87.60, server: kocervpn.com, request: "POST /core/.env HTTP/1.1", host: "kocervpn.com"
2026/06/02 14:43:21 [error] 2871073#2871073: *1625632 access forbidden by rule, client: 129.121.87.60, server: kocervpn.com, request: "POST /api/.env HTTP/1.1", host: "kocervpn.com"
2026/06/02 14:43:21 [error] 2871073#2871073: *1625632 access forbidden by rule, client: 129.121.87.60, server: kocervpn.com, request: "POST /laravel/.env HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack
๐ซ๐ท
Baking333
2026-06-02 14:35:37
(4 days ago)
[redacted] 129.121.87.60 - - [02/Jun/2026:15:35:34 +0100] "POST /.env HTTP/1.1" 405 1148 0/70794 "-" ...
show more
[redacted] 129.121.87.60 - - [02/Jun/2026:15:35:34 +0100] "POST /.env HTTP/1.1" 405 1148 0/70794 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0" [redacted] 129.121.87.60 - - [02/Jun/2026:15:35:34 +0100] "POST /app/.env HTTP/1.1" 405 1148 0/142328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0" [redacted] 129.121.87.60 - - [02/Jun/2026:15:35:34 +0100] "POST /laravel/.env HTTP/1.1" 405 1148 0/183768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36 Edg/129.0.0.0"
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-06-01 22:52:28
(4 days ago)
Multiple WAF Violations
Web App Attack
๐ฎ๐ฉ
Incidents Response Neptus Team
2026-06-01 22:44:00
(4 days ago)
Report Abuse IP
Exploited Host
Web App Attack
Hacking
๐ซ๐ท
Baking333
2026-06-01 20:43:16
(4 days ago)
[redacted] 129.121.87.60 - - [01/Jun/2026:21:43:14 +0100] "POST /app/.env HTTP/1.1" 405 1148 0/89924 ...
show more
[redacted] 129.121.87.60 - - [01/Jun/2026:21:43:14 +0100] "POST /app/.env HTTP/1.1" 405 1148 0/89924 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36" [redacted] 129.121.87.60 - - [01/Jun/2026:21:43:14 +0100] "POST /core/.env HTTP/1.1" 405 1148 0/136435 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
MusicLibrary
2026-06-01 18:51:01
(4 days ago)
Attempted access to sensitive configuration files (.env, .git, etc.)
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-06-01 18:01:04
(4 days ago)
[redacted] 129.121.87.60 - - [01/Jun/2026:19:01:02 +0100] "POST /.env HTTP/1.1" 405 1148 0/713501 "- ...
show more
[redacted] 129.121.87.60 - - [01/Jun/2026:19:01:02 +0100] "POST /.env HTTP/1.1" 405 1148 0/713501 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15" [redacted] 129.121.87.60 - - [01/Jun/2026:19:01:03 +0100] "POST /core/.env HTTP/1.1" 405 4877 0/66005 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
CanadaCanuck1
2026-06-01 13:17:00
(5 days ago)
Scanning for .env files
Web App Attack
Anonymous
2026-06-01 09:08:41
(5 days ago)
129.121.87.60 - - [01/Jun/2026:11:08:40 +0200] "POST /.env HTTP/1.1" 404 6840 "-" "Mozilla/5.0 (X11; ...
show more
129.121.87.60 - - [01/Jun/2026:11:08:40 +0200] "POST /.env HTTP/1.1" 404 6840 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:127.0) Gecko/20100101 Firefox/127.0"
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
NewWavesApp
2026-05-31 03:25:23
(6 days ago)
(mod_security) mod_security triggered on hostname [redacted] 129.121.87.60 (US/United States/129-121 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 129.121.87.60 (US/United States/129-121-87-60.unifiedlayer.com): (CF_ENABLE)
show less
SQL Injection