🇩🇪
jeff minton
2026-11-07 12:37:12
UTC ·
(4 days ago)
Cloudflare WAF 2026-11-07 11:32 - 2026-11-07 12:37 UTC, 1 requests: probed /.env | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari
Hacking
Web App Attack
🇫🇷
vados
2026-11-07 12:19:43
UTC ·
(4 days ago)
Scanner/vulnerability probe. Threat Monitor: scanner auto-block (score 90)
Bad Web Bot
Web App Attack
🇺🇸
JonathanYoung2161
2026-11-07 12:10:52
UTC ·
(4 days ago)
sipconnect.simplifiedmedia.net 221.150.109.120 - - [07/Nov/2026:06:10:47 -0600] "GET /.env HTTP/2.0" 403 2845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
sipconnect.simplifiedmedia ...
show more
sipconnect.simplifiedmedia.net 221.150.109.120 - - [07/Nov/2026:06:10:47 -0600] "GET /.env HTTP/2.0" 403 2845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
sipconnect.simplifiedmedia.net 221.150.109.120 - - [07/Nov/2026:06:10:49 -0600] "GET /.env.local HTTP/2.0" 403 2845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
sipconnect.simplifiedmedia.net 221.150.109.120 - - [07/Nov/2026:06:10:50 -0600] "GET /.env.production HTTP/2.0" 403 2845 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
shurizma
2026-11-07 11:54:56
UTC ·
(4 days ago)
[07/Nov/2026:11:54:56 +0000] - 307 307 - GET https request.jelly.shuri.gg "/.env" [Client 221.150.109.120] [Length 5] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/5 ...
show more
[07/Nov/2026:11:54:56 +0000] - 307 307 - GET https request.jelly.shuri.gg "/.env" [Client 221.150.109.120] [Length 5] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36" "-"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
PlexLads
2026-11-07 11:48:35
UTC ·
(4 days ago)
221.150.109.120 - - [07/Nov/2026:03:48:34 -0800] "GET /.env HTTP/1.1" 307 4720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
Hacking
Web App Attack
🇸🇪
nekopavel
2026-11-07 11:02:55
UTC ·
(4 days ago)
221.150.109.120 - - [07/Nov/2026:12:02:42 +0100]"GET /.env HTTP/1.1" 307 5"-" jellyseerr.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36""0.065" "0.000""Guro-gu" "KR"
221.150.109.1 ...
show more
221.150.109.120 - - [07/Nov/2026:12:02:42 +0100]"GET /.env HTTP/1.1" 307 5"-" jellyseerr.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36""0.065" "0.000""Guro-gu" "KR"
221.150.109.120 - - [07/Nov/2026:12:02:48 +0100]"GET /.env.local HTTP/1.1" 307 5"-" jellyseerr.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36""0.020" "0.000""Guro-gu" "KR"
221.150.109.120 - - [07/Nov/2026:12:02:52 +0100]"GET /.env.production HTTP/1.1" 307 5"-" jellyseerr.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36""0.013" "0.000""Guro-gu" "KR"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇨🇦
Not Fake
2026-11-07 10:59:29
UTC ·
(4 days ago)
$f2bV_matches
Web App Attack
🇺🇸
casascius
2026-11-07 10:41:04
UTC ·
(4 days ago)
Web probe blocked: requested /.env.local . This is an attempt to steal credentials or source code; the site never publishes or links to this. Banned as the second such request within an hour.
Web App Attack
🇳🇱
vanadrighem.eu
2026-11-07 10:39:19
UTC ·
(4 days ago)
Automatic Fail2ban report
Web App Attack
🇹🇷
ayayntr
2026-11-07 10:39:15
UTC ·
(4 days ago)
[Sat Nov 07 13:35:33.264431 2026] [authz_core:error] [pid 1623:tid 1797] [client 221.150.109.120:47686] AH01630: client denied by server configuration: /var/www/html/.env
[Sat Nov 07 13:35:46.778421 2026] [authz_core:error] [pid 3128:tid 3172] [clien ...
show more
[Sat Nov 07 13:35:33.264431 2026] [authz_core:error] [pid 1623:tid 1797] [client 221.150.109.120:47686] AH01630: client denied by server configuration: /var/www/html/.env
[Sat Nov 07 13:35:46.778421 2026] [authz_core:error] [pid 3128:tid 3172] [client 221.150.109.120:52498] AH01630: client denied by server configuration: /var/www/html/.env.dev
[Sat Nov 07 13:39:07.683995 2026] [authz_core:error] [pid 3128:tid 3157] [client 221.150.109.120:58298] AH01630: client denied by server configuration: /var/www/html/.env
[Sat Nov 07 13:39:08.587751 2026] [authz_core:error] [pid 3128:tid 3165] [client 221.150.109.120:58298] AH01630: client denied by server configuration: /var/www/html/.env.local
[Sat Nov 07 13:39:09.369338 2026] [authz_core:error] [pid 3128:tid 3159] [client 221.150.109.120:58298] AH01630: client denied by server configuration: /var/www/html/.env.production
...
show less
Brute-Force
SSH
🇺🇸
PlexLads
2026-11-05 15:14:08
UTC ·
(6 days ago)
221.150.109.120 - - [05/Nov/2026:07:14:03 -0800] "GET /.env HTTP/1.1" 301 452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36" 221.150.109.120 - - [05/Nov/2026:07:14:06 -0800] "GET /.en ...
show more
221.150.109.120 - - [05/Nov/2026:07:14:03 -0800] "GET /.env HTTP/1.1" 301 452 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36" 221.150.109.120 - - [05/Nov/2026:07:14:06 -0800] "GET /.env HTTP/1.1" 307 4720 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0 Safari/537.36"
show less
Hacking
Web App Attack
🇹🇷
ayayntr
2026-11-05 15:13:56
UTC ·
(6 days ago)
[Thu Nov 05 18:08:51.704150 2026] [authz_core:error] [pid 15559:tid 15600] [client 221.150.109.120:57632] AH01630: client denied by server configuration: /var/www/html/.env
[Thu Nov 05 18:08:53.022834 2026] [authz_core:error] [pid 5561:tid 5608] [cli ...
show more
[Thu Nov 05 18:08:51.704150 2026] [authz_core:error] [pid 15559:tid 15600] [client 221.150.109.120:57632] AH01630: client denied by server configuration: /var/www/html/.env
[Thu Nov 05 18:08:53.022834 2026] [authz_core:error] [pid 5561:tid 5608] [client 221.150.109.120:58596] AH01630: client denied by server configuration: /var/www/html/.env.local
[Thu Nov 05 18:08:58.696513 2026] [authz_core:error] [pid 15559:tid 15591] [client 221.150.109.120:60820] AH01630: client denied by server configuration: /var/www/html/.env.bak
[Thu Nov 05 18:13:46.697904 2026] [authz_core:error] [pid 15559:tid 15609] [client 221.150.109.120:46454] AH01630: client denied by server configuration: /var/www/html/.env
[Thu Nov 05 18:13:50.504417 2026] [authz_core:error] [pid 15559:tid 15611] [client 221.150.109.120:48296] AH01630: client denied by server configuration: /var/www/html/.env.bak
...
show less
Brute-Force
SSH