๐ซ๐ท
masterguru
2026-10-28 00:18:46
(8 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201)
show less
Bad Web Bot
๐ธ๐ช
vaia.cloud
2026-10-27 22:30:02
(10 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-10-27 18:04:23
(15 hours ago)
3.084 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
๐ง๐ท
radardatelecom
2026-10-27 16:51:03
(16 hours ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
Anonymous
2026-10-27 16:16:35
(16 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ฉ๐ช
Marc
2026-10-27 14:29:22
(18 hours ago)
130.211.75.101 - - [27/Oct/2026:15:29:22 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 ...
show more
130.211.75.101 - - [27/Oct/2026:15:29:22 +0100] "GET /sitemap.xml HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" 130.211.75.101 - - [27/Oct/2026:15:29:22 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 130.211.75.101 - - [27/Oct/2026:15:29:22 +0100] "GET /admin/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force
๐ฌ๐ง
stevendodd
2026-10-27 12:49:16
(20 hours ago)
130.211.75.101 - - [27/Oct/2026:12:49:15 +0000] "GET /actuator HTTP/1.1" 404 392 "-" "Mozilla/5.0 (X ...
show more
130.211.75.101 - - [27/Oct/2026:12:49:15 +0000] "GET /actuator HTTP/1.1" 404 392 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
130.211.75.101 - - [27/Oct/2026:12:49:16 +0000] "GET /.env.supabase HTTP/1.1" 404 392 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
130.211.75.101 - - [27/Oct/2026:12:49:16 +0000] "GET /.env HTTP/1.1" 404 392 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
130.211.75.101 - - [27/Oct/2026:12:49:16 +0000] "GET /push_config.json HTTP/1.1" 404 392 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
130.211.75.101 - - [27/Oct/2026:12:49:16 +0000] "GET /.env.backup HTTP/1.1" 404 392 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
130.211.75.101
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
WizardsToolkit
2026-10-27 08:19:11
(1 day ago)
access attempt caught by wtkGetIPaddress;
Brute-Force
Anonymous
2026-10-27 05:05:54
(1 day ago)
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozill ...
show more
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.credentials HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 130.211.75.101
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.keys HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 130.211.75.101
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 130.211.75.101
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.production.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" 130.211.75.101
130.211.75.101 - - [27/Oct/2026:00:05:53 -0500] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Cla
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-27 03:17:16
(1 day ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-10-27 01:43:56
(1 day ago)
cloudlinux2 fail2ban: 2026-10-27 02:38:59,660 fail2ban.filter [1596]: INFO [plesk-wordpre ...
show more
cloudlinux2 fail2ban: 2026-10-27 02:38:59,660 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 173.239.213.2 - 2026-10-27 02:38:59cloudlinux2 fail2ban: 2026-10-27 02:39:08,974 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 82.76.227.176 - 2026-10-27 02:39:08cloudlinux2 fail2ban: 2026-10-27 02:39:09,256 fail2ban.filter [1596]: INFO [recidive] Found 82.76.227.176 - 2026-10-27 02:39:09cloudlinux2 fail2ban: 2026-10-27 02:39:12,423 fail2ban.filter [1596]: INFO [plesk-wordpress] Found 142.111.152.188 - 2026-10-27 02:39:11cloudlinux2 fail2ban: 2026-10-27 02:39:09,249 fail2ban.actions [1596]: NOTICE [plesk-modsecurity] Ban 82.76.227.176cloudlinux2 fail2ban: 2026-10-27 02:41:13,508 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 130.211.75.101 - 2026-10-27 02:41:13cloudlinux2 fail2ban: 2026-10-27 02:41:13,447 fail2ban.filter [1596]: INFO [plesk-modsecurity] Found 130.211.75.101 - 2026-10-27 02:41:13cloudlinux2 fail2ban: 2026-1
show less
Web App Attack
๐บ๐ธ
mnsf
2026-10-26 22:05:33
(1 day ago)
Too many Status 40X (18)
Scanning/Probing (11)
Brute-Force
Web App Attack
๐ฉ๐ช
pscriptos
2026-10-26 21:59:45
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ฉ๐ช
pscriptos
2026-10-26 21:36:27
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
๐ฉ๐ช
pscriptos
2026-10-26 19:07:20
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack