2026-10-22 06:12:19
(1 hour ago)
Attempted access to sensitive endpoint (/@fs/../.env?raw??) detected. Automated scan or unauthorized ...
show more
Attempted access to sensitive endpoint (/@fs/../.env?raw??) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇩🇪
juutis
2026-10-22 06:08:48
(1 hour ago)
[Thu Oct 22 08:08:47.665971 2026] [authz_core:error] [pid 903662:tid 903715] [client 34.104.139.120: ...
show more
[Thu Oct 22 08:08:47.665971 2026] [authz_core:error] [pid 903662:tid 903715] [client 34.104.139.120:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.production
[Thu Oct 22 08:08:47.666257 2026] [authz_core:error] [pid 903662:tid 903723] [client 34.104.139.120:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.dev
[Thu Oct 22 08:08:47.668160 2026] [authz_core:error] [pid 903662:tid 903700] [client 34.104.139.120:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/environment.json
[Thu Oct 22 08:08:47.670005 2026] [authz_core:error] [pid 903657:tid 903680] [client 34.104.139.120:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.local
[Thu Oct 22 08:08:47.674012 2026] [authz_core:error] [pid 903662:tid 903696] [client 34.104.139.120:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config/.env.staging
show less
Hacking
Brute-Force
🇮🇹
VHosting
2026-10-21 23:05:03
(8 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-10-21 20:05:05
(11 hours ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
2026-10-21 19:01:06
(12 hours ago)
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web app ...
show more
Web application attack: grafana cve 2021 43798; Web application attack: http cve 2021 41773; Web application attack: http sensitive files; Web application attack: http path traversal probing; Probing for exposed secret / credential files
show less
Hacking
Web App Attack
🇬🇧
consul.to
2026-10-21 17:58:09
(13 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
vaia.cloud
2026-10-21 15:45:03
(15 hours ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-21 15:21:00
(16 hours ago)
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[formsbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.104.139.120 - - [21/Oct/2026:17:20:40 +0200] "GET /.envrc HTTP/2.0" 301 335 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Bad Web Bot
Web App Attack
2026-10-21 15:16:00
(16 hours ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ConsulHosting
2026-10-21 14:47:56
(16 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-21 08:08:12
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.104.139.120 (JP/Japan/120.139.104.34.bc.goog ...
show more
(mod_security) mod_security (id:949110) triggered by 34.104.139.120 (JP/Japan/120.139.104.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇭🇰
amyriad
2026-10-21 07:55:09
(23 hours ago)
34.104.139.120 - - [21/Oct/2026:15:55:08 +0800] "GET /files../.env HTTP/1.1" 404 347 "-" "Mozilla/5. ...
show more
34.104.139.120 - - [21/Oct/2026:15:55:08 +0800] "GET /files../.env HTTP/1.1" 404 347 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.104.139.120 - - [21/Oct/2026:15:55:08 +0800] "GET /dist../.env HTTP/1.1" 404 347 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
34.104.139.120 - - [21/Oct/2026:15:55:08 +0800] "GET /static../.env HTTP/1.1" 404 4340 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
DDoS Attack
Hacking
Brute-Force
🇺🇸
jormaster3k
2026-10-21 07:30:29
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
rh24
2026-10-21 05:14:25
(1 day ago)
(badbots) Bad bot user-agent [redacted] from 34.104.139.120 (JP/Japan/120.139.104.34.bc.googleuserco ...
show more
(badbots) Bad bot user-agent [redacted] from 34.104.139.120 (JP/Japan/120.139.104.34.bc.googleusercontent.com)
show less
Hacking
2026-10-21 04:58:07
(1 day ago)
34.104.139.120 - - [21/Oct/2026:00:58:06 -0400] "GET /core/.env HTTP/1.1" 404 461 "-" "Mozilla/5.0 ( ...
show more
34.104.139.120 - - [21/Oct/2026:00:58:06 -0400] "GET /core/.env HTTP/1.1" 404 461 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
Web App Attack
SSH