🇧🇪
madeit
2026-11-14 20:14:58
UTC ·
(28 minutes ago)
Web App Attack
🇧🇪
madeit
2026-10-30 17:50:50
UTC ·
(2 weeks ago)
Web App Attack
🇹🇷
ScchutzZ
2026-10-02 22:05:03
UTC ·
(1 month ago)
Fail2Ban banı. Jail: plesk-modsecurity.
Brute-Force
Anonymous
2026-09-27 20:17:06
UTC ·
(1 month ago)
IP matched detection query many 3xx errors.
Brute-Force
Anonymous
2026-09-20 18:10:45
UTC ·
(1 month ago)
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:40 +0000] "GET /.env.prod HTTP/1.1"
[REDACTED] ...
show more
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:40 +0000] "GET /.env.prod HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:40 +0000] "GET /.env.stage HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:41 +0000] "GET /.env.ci HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:41 +0000] "GET /.env.docker HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [20/Sep/2026:18:10:41 +0000] "GET /.env.live HTTP/1.1"
show less
Port Scan
Anonymous
2026-09-14 16:27:18
UTC ·
(2 months ago)
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:16 +0000] "GET /.env.dist HTTP/1.1"
[REDACTED] ...
show more
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:16 +0000] "GET /.env.dist HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:16 +0000] "GET /.env.swp HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:16 +0000] "GET /.env~ HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:17 +0000] "GET /.env.txt HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [14/Sep/2026:16:27:17 +0000] "GET /.env.json HTTP/1.1"
show less
Port Scan
🇧🇪
madeit
2026-09-13 13:59:45
UTC ·
(2 months ago)
Web App Attack
Anonymous
2026-09-10 04:05:08
UTC ·
(2 months ago)
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:04:56 +0000] "GET /private/.env HTTP/1.1"
[REDACTE ...
show more
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:04:56 +0000] "GET /private/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:04:58 +0000] "GET /var/www/html/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:05:06 +0000] "GET /prod/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:05:06 +0000] "GET /dev/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [10/Sep/2026:04:05:07 +0000] "GET /staging/.env HTTP/1.1"
show less
Port Scan
🇳🇱
homeshowdomain.nl
2026-09-09 22:03:22
UTC ·
(2 months ago)
Auto-ban: >3000 req/min op 2026-09-09
Web App Attack
SSH
Hacking
Anonymous
2026-09-09 14:27:57
UTC ·
(2 months ago)
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:39 +0000] "GET /.env.yaml HTTP/1.1"
[REDACTED] ...
show more
(caddyscan) Scanner path probe from 172.69.9.62 (IT/Italy/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:39 +0000] "GET /.env.yaml HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:55 +0000] "GET /opt/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:56 +0000] "GET /laravel/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:56 +0000] "GET /symfony/.env HTTP/1.1"
[REDACTED] 200 2627 172.69.9.62 - - [09/Sep/2026:14:27:56 +0000] "GET /wordpress/.env HTTP/1.1"
show less
Port Scan
Anonymous
2026-09-07 17:14:13
UTC ·
(2 months ago)
[Mon Sep 07 19:14:11.832077 2026] [authz_core:error] [pid 13347] [client 172.69.9.62:14108] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 07 19:14:12.143706 2026] [authz_core:error] [pid 13347] [client 172.69.9.62:14108] ...
show more
[Mon Sep 07 19:14:11.832077 2026] [authz_core:error] [pid 13347] [client 172.69.9.62:14108] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 07 19:14:12.143706 2026] [authz_core:error] [pid 13347] [client 172.69.9.62:14108] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Mon Sep 07 19:14:12.511989 2026] [authz_core:error] [pid 13347] [client 172.69.9.62:14108] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
Anonymous
2026-08-19 09:57:32
UTC ·
(2 months ago)
Aggressive web scan
Web App Attack
Anonymous
2026-08-06 03:25:04
UTC ·
(3 months ago)
[Thu Aug 06 05:25:03.205212 2026] [authz_core:error] [pid 10150] [client 172.69.9.62:12007] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Aug 06 05:25:03.335064 2026] [authz_core:error] [pid 10150] [client 172.69.9.62:12007] ...
show more
[Thu Aug 06 05:25:03.205212 2026] [authz_core:error] [pid 10150] [client 172.69.9.62:12007] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Aug 06 05:25:03.335064 2026] [authz_core:error] [pid 10150] [client 172.69.9.62:12007] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Thu Aug 06 05:25:03.371016 2026] [authz_core:error] [pid 10150] [client 172.69.9.62:12007] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
🇩🇪
ghostwarriors
2026-07-06 08:56:00
UTC ·
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-07-03 02:22:10
UTC ·
(4 months ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack