🇳🇱
homeshowdomain.nl
2026-11-07 22:59:12
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-06.
Web App Attack
SSH
Hacking
🇿🇦
conure.sh
2026-11-06 12:14:19
UTC ·
(3 days ago)
csagent: score 19.6: 404 noise floor x39, wp-config backup grab x1; 1 domain(s) in 5s
Web App Attack
🇫🇷
900cm
2026-11-06 08:50:44
UTC ·
(4 days ago)
[Fri Nov 06 09:50:44.054726 2026] [access_compat:error] [pid 788002:tid 788002] [client 34.14.113.124:48632] AH01797: client denied by server configuration: /var/www/nextcloud/config/gcp-credentials.json
[Fri Nov 06 09:50:44.056121 2026] [access_comp ...
show more
[Fri Nov 06 09:50:44.054726 2026] [access_compat:error] [pid 788002:tid 788002] [client 34.14.113.124:48632] AH01797: client denied by server configuration: /var/www/nextcloud/config/gcp-credentials.json
[Fri Nov 06 09:50:44.056121 2026] [access_compat:error] [pid 792877:tid 792877] [client 34.14.113.124:48536] AH01797: client denied by server configuration: /var/www/nextcloud/config/firebase-admin.json
[Fri Nov 06 09:50:44.073899 2026] [authz_core:error] [pid 792875:tid 792875] [client 34.14.113.124:48548] AH01630: client denied by server configuration: /var/www/nextcloud/.htpasswd
...
show less
Port Scan
Brute-Force
SSH
Anonymous
2026-11-06 05:54:41
UTC ·
(4 days ago)
Banned by Fail2Ban on server
Web App Attack
🇳🇱
Alt255
2026-11-06 05:42:21
UTC ·
(4 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.113.124 - - [06/Nov/2026:06:42:08 +0100] "GET /dist../.env HTTP/2.0" 403 250 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https:/ ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.14.113.124 - - [06/Nov/2026:06:42:08 +0100] "GET /dist../.env HTTP/2.0" 403 250 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-06 04:51:06
UTC ·
(4 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.14.113.124 (BE/Belgium/124.113.14.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.14.113.124 - - [06/Nov/2026:05:51: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.14.113.124 (BE/Belgium/124.113.14.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.14.113.124 - - [06/Nov/2026:05:51:03 +0100] "GET /process.env HTTP/2.0" 429 41 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "172.30.176.133" host=mail.miafit.it
show less
Port Scan
🇳🇱
Site.eu
2026-11-06 04:28:57
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 04:28:05
UTC ·
(4 days ago)
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /mx3z7mm2ovlmlhwfmx7m HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100 ...
show more
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /mx3z7mm2ovlmlhwfmx7m HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /ngsw.json HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /build/manifest.json HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /dist/manifest.json HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:56 +0100] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:27:55 +0100] "GET /1tshgbpu5aq5gstnaev6 HTTP/1.1" 404 30261
34.14.113.124 - - [06/Nov/2026:05:28:00 +0100] "GET /laravel../config/database.php HTTP/1.1" 404 29624
34.14.113.124 - - [06/Nov/2026:05:28:00 +0100] "POST /graphql HTTP/1.1" 404 29624
34.14.113.124 - - [06/Nov/2026:05:28:01 +0100] "GET /proc/self/environ%3F.js HTTP/1.1" 404 30261
...
show less
Web Spam
Web App Attack
Anonymous
2026-11-06 03:07:37
UTC ·
(4 days ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
Anonymous
2026-11-06 02:47:42
UTC ·
(4 days ago)
Web application attack.
Hacking
🇫🇷
Tilellit.PRO
2026-11-06 02:25:00
UTC ·
(4 days ago)
Malicious web traffic detected by CrowdSec
Hacking
🇬🇧
andypiper
2026-11-06 02:02:24
UTC ·
(4 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇹🇷
Jova
2026-11-06 01:53:12
UTC ·
(4 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇫🇮
paissangroup
2026-11-06 01:43:23
UTC ·
(4 days ago)
Multiple WAF Violations
Web App Attack
🇫🇷
mail.avx.gr
2026-11-06 01:37:36
UTC ·
(4 days ago)
plesk-rapid-ban env-second-probe host=webmail.syfachanion.gr
Hacking