🇳🇱
homeshowdomain.nl
2026-11-06 23:01:31
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇸🇬
azminawwar
2026-11-06 17:20:14
UTC ·
(1 day ago)
34.13.62.71 Probing for vulnerable code from 2026-11-07 00:18:40 WIB, evidence: tienabled|0|0|0|azmi.my.id/includes/phpinfo.php
Web App Attack
Hacking
Anonymous
2026-11-06 12:47:23
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.13.62.71 (GB/United Kingdom/71.62.13.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
wupinyin
2026-11-05 21:43:48
UTC ·
(2 days ago)
Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development | Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env. ...
show more
Probing for sensitive files: GET /.git/config, GET /.env, GET /.env.local, GET /.env.staging, GET /.env.development | Probing for known attack paths (web shells, dotfiles, dumps, config files): GET /.git/config, GET /.env, GET /.env.local, GET /.env.production, GET /.env.staging (+5 more) [16 events, 2026-11-05T21:43:48Z; auto-reported by CrowdSec]
show less
Web App Attack
🇦🇺
Klaverstyn
2026-11-05 21:04:52
UTC ·
(2 days ago)
Excessive HTTP request rate
Web App Attack
🇸🇪
nekopavel
2026-11-05 09:14:40
UTC ·
(3 days ago)
34.13.62.71 - - [05/Nov/2026:10:14:38 +0100]"GET /.git/config HTTP/1.1" 404 178"-" autoconfig.neko.chat "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""City of London" "GB"
34.13. ...
show more
34.13.62.71 - - [05/Nov/2026:10:14:38 +0100]"GET /.git/config HTTP/1.1" 404 178"-" autoconfig.neko.chat "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""City of London" "GB"
34.13.62.71 - - [05/Nov/2026:10:14:38 +0100]"GET /.env HTTP/1.1" 404 178"-" autoconfig.neko.chat "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.002" "0.000""City of London" "GB"
34.13.62.71 - - [05/Nov/2026:10:14:38 +0100]"GET /.env.local HTTP/1.1" 404 178"-" autoconfig.neko.chat "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.001" "0.001""City of London" "GB"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇧🇪
boxed-it
2026-11-04 21:31:01
UTC ·
(3 days ago)
GET /.git/config (Tarpitted for 1d15h8m27s, wasted 8.06MB)
Web App Attack
🇳🇱
ams_sec_user
2026-11-04 21:05:18
UTC ·
(3 days ago)
Automated requests against a hosted website: 226 requests between 20:00 and 20:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
Hacking
Bad Web Bot
Web App Attack
🇨🇭
copestack
2026-11-04 11:00:04
UTC ·
(4 days ago)
Automated detection: HTTP environment file enumeration (.env credential harvesting). 1 decisions on ov-9acb4e.
Web App Attack
🇺🇸
EmilGH
2026-11-04 10:07:32
UTC ·
(4 days ago)
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.git/config HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET / ...
show more
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.git/config HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.env HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.env.local HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.env.production HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [04/Nov/2026:10:07:27 +0000] "GET /.env.staging HTTP/1.1" 403 585 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62
...
show less
Bad Web Bot
Web App Attack
🇺🇸
infra-monitor
2026-11-04 06:00:18
UTC ·
(4 days ago)
Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-probing, crowdsecurity/http-sensitive-files
Port Scan
Web App Attack
🇨🇦
Sakusen
2026-11-04 04:40:31
UTC ·
(4 days ago)
Automated web attack: 277 reqs, 267 paths probed, 232 returned 404; probed: 206 .env, 44 .php, 9 .json, 4 secret, 2 other, 1 .git, 1 cloud-cred
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Marco711
2026-11-04 01:47:37
UTC ·
(4 days ago)
port/URL scanning
Port Scan
Web App Attack
🇫🇷
Zundapper
2026-11-03 16:14:25
UTC ·
(4 days ago)
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "POST / HTTP/1.1" 404 548 " ...
show more
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "GET / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.13.62.71 - - [03/Nov/2026:17:14:24 +0100] "POST / HTTP/1.1" 404 548 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
Anonymous
2026-11-03 12:11:40
UTC ·
(5 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack