๐ณ๐ฑ
middelkoopcc
2026-10-21 19:01:03
(20 hours ago)
2026-10-21 20:59:55 GET /api/.env/public/.env [301] && 2026-10-21 20:59:55 GET /static/home/user/.en ...
show more
2026-10-21 20:59:55 GET /api/.env/public/.env [301] && 2026-10-21 20:59:55 GET /static/home/user/.env [301] && 2026-10-21 20:59:55 GET /static/.env [301] && 165 more within 20 minutes
show less
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-21 18:58:07
(20 hours ago)
Try to access /.env.supabase
Web App Attack
Anonymous
2026-10-21 18:27:02
(20 hours ago)
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env_1 HTTP/1.1" 301 264 "-" "Mozilla/5.0 AppleW ...
show more
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env_1 HTTP/1.1" 301 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 172.70.80.149
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env_sample HTTP/1.1" 301 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 172.69.130.209
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env.www HTTP/1.1" 301 266 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" 172.69.214.134
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env.live HTTP/1.1" 301 267 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" 108.162.242.48
34.152.52.73 - - [21/Oct/2026:13:27:01 -0500] "GET /.env.stage HTTP/1.1" 301 268 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/per
...
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-21 18:01:29
(21 hours ago)
Web application attack: http path traversal probing; Web application attack: grafana cve 2021 43798; ...
show more
Web application attack: http path traversal probing; Web application attack: grafana cve 2021 43798; Probing for exposed secret / credential files; Web application attack: http sensitive files; Web application attack: http cve 2021 41773
show less
Hacking
Web App Attack
๐บ๐ธ
Starburst SysOp Team
2026-10-21 17:53:45
(21 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-srv1)
show less
Bad Web Bot
๐ซ๐ฎ
oh.mg
2026-10-21 17:44:15
(21 hours ago)
[Wed Oct 21 19:44:10.820993 2026] [security2:error] [pid 2231972:tid 2231999] [client 34.152.52.73:0 ...
show more
[Wed Oct 21 19:44:10.820993 2026] [security2:error] [pid 2231972:tid 2231999] [client 34.152.52.73:0] [client 34.152.52.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "2ca.mmn.ca"] [uri "/"] [unique_id "atj56iPAbDawU94kxsXETwAAAJc"]
[Wed Oct 21 19:44:14.297847 2026] [security2:error] [pid 2238209:tid 2238216] [client 34.152.52.73:0] [client 34.152.52.73] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 40)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluatio
...
show less
Web App Attack
Bad Web Bot
๐ฉ๐ช
rh24
2026-10-21 16:25:53
(22 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.152.52.73 (CA/Can ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.152.52.73 (CA/Canada/73.52.152.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฉ๐ช
Melle
2026-10-21 16:22:59
(22 hours ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-probing | 34.152.52.73 triggered 11 events | Dete ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-probing | 34.152.52.73 triggered 11 events | Detected: 2026-10-21T16:22:57.880870013Z
show less
Web App Attack
Hacking
๐ซ๐ท
/dev/null
2026-10-21 16:17:35
(22 hours ago)
Web attack | malicious scanning detected.
Hacking
Web App Attack
๐บ๐ธ
mnsf
2026-10-21 16:05:26
(23 hours ago)
Too many Status 40X (69)
Scanning/Probing (53)
Request Overload (193)
Brute-Force
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-10-21 15:41:08
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐บ๐ธ
mad-abuseip
2026-10-21 15:39:32
(23 hours ago)
SCORE:99 REASON:suspicious-score:100 | "GET /api/orders/..%2f..%2fproc/self/environ HTTP/1.1" SCORE ...
show more
SCORE:99 REASON:suspicious-score:100 | "GET /api/orders/..%2f..%2fproc/self/environ HTTP/1.1" SCORE:99 REASON:suspicious-score:100 - "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
show less
Web App Attack
Anonymous
2026-10-21 15:29:45
(23 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-10-21 15:23:04
(23 hours ago)
[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-05al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.152.52.73 - - [21/Oct/2026:17:22:44 +0200] "GET /z9x8c7v6b5-debug-trigger-cloudimage.nl HTTP/2.0" 404 1901 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.152.52.73 - - [21/Oct/2026:17:22:44 +0200] "GET /fmwxmsjfvtwy1ymntfu9 HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.152.52.73 - - [21/Oct/2026:17:22:44 +0200] "GET /hjz40p0sqvo1phxr0fbm HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.152.52.73 - - [21/Oct/2026:17:22:44 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
05ti.alt255
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
pscriptos
2026-10-21 15:22:26
(23 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot