🇩🇪
yitzhaq
2026-09-12 07:48:10
(6 minutes ago)
34.150.21.17 - - [12/Sep/2026:09:48:04 +0200] "POST / HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (Macintosh ...
show more
34.150.21.17 - - [12/Sep/2026:09:48:04 +0200] "POST / HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [12/Sep/2026:09:48:05 +0200] "POST / HTTP/1.1" 200 1239 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [12/Sep/2026:09:48:05 +0200] "GET /.git/config HTTP/1.1" 403 515 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [12/Sep/2026:09:48:05 +0200] "GET /.env HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [12/Sep/2026:09:48:05 +0200] "GET /.env.local HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.
show less
Web App Attack
Hacking
🇪🇸
pipeline.es
2026-09-12 07:16:33
(38 minutes ago)
Web scanning / probing for vulnerable paths | URL: /notifications/.env | Evidence: acubaconmigo.com ...
show more
Web scanning / probing for vulnerable paths | URL: /notifications/.env | Evidence: acubaconmigo.com 34.150.21.17 - - [12/Sep/2026:09:16:05 +0200] \"GET /notifications/.env HTTP/1.1\" 404 26909 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=HK | ASN: GOOGLE-CLOUD-PLATFORM | Country: HK
show less
Port Scan
Web App Attack
🇫🇷
masterguru
2026-09-12 07:10:09
(44 minutes ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇨🇭
zynex
2026-09-12 06:14:41
(1 hour ago)
URL Probing: /backend/.env
Web App Attack
🇫🇷
dynamix
2026-09-12 05:49:03
(2 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-09-11 16:48:30
(15 hours ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack
🇫🇮
000rosiu
2026-09-11 10:54:51
(20 hours ago)
Triggered Cloudflare WAF (firewallManaged) from HK.
Action: BLOCK | Protocol: HTTP/1.1 (POST) | Endp ...
show more
Triggered Cloudflare WAF (firewallManaged) from HK.
Action: BLOCK | Protocol: HTTP/1.1 (POST) | Endpoint: / | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇵🇱
strefapi_com
2026-09-11 08:05:35
(23 hours ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
Anonymous
2026-09-11 05:00:47
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇺🇸
WellSpring
2026-09-11 04:43:54
(1 day ago)
env leak on 989.today/web/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇳🇱
Site.eu
2026-09-10 05:15:56
(2 days ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
snhosting
2026-09-10 04:46:34
(2 days ago)
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ...
show more
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:24 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:25 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.150.21.17 - - [10/Sep/2026:06:46:25 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
Anonymous
2026-09-10 04:37:11
(2 days ago)
CrowdSec blocked IP for crowdsecurity/http-sensitive-files on vps_agent
Web App Attack
🇨🇭
leo1305
2026-09-10 04:34:15
(2 days ago)
CrowdSec detection | scenario: http-sensitive-files
Web App Attack
Exploited Host
Anonymous
2026-09-10 04:30:12
(2 days ago)
Auto-reported by Fail2Ban (NPM-Auth)
Web App Attack