๐ง๐ช
cmbplf
2026-10-21 09:32:43
(5 days ago)
673 requests with url.path */@fs/*
262 requests with url.path */proc/*
Brute-Force
Bad Web Bot
๐บ๐ธ
Epimetheus
2026-10-21 08:41:01
(5 days ago)
Zombie network / Bot scanner detected:
[GET] /static/..;/.env
[GET] /firebase-config.js
[GET] /dock ...
show more
Zombie network / Bot scanner detected:
[GET] /static/..;/.env
[GET] /firebase-config.js
[GET] /docker-compose.dev.yml
[GET] /settings%2F.env
[GET] /docker-compose.production.yml
[GET] /static//app/.env
UA: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
Epimetheus
2026-10-21 08:17:02
(5 days ago)
Zombie network / Bot scanner detected:
[POST] /langflow/api/v1/validate/code
[POST] /api/v1/node-lo ...
show more
Zombie network / Bot scanner detected:
[POST] /langflow/api/v1/validate/code
[POST] /api/v1/node-load-method/customMCP
[POST] /api/auth
[POST] /lib/file-control.php
[POST] /app
[GET] /railway.json
[GET] /userfiles
[GET] /@fs/.env
[GET] /service_account.json
[GET] /.env.config
[GET] /web/.env
[GET] /.env.production
[GET] /public/.env
[POST] /api
[GET] /.env.production
[GET] /.dbeaver/credentials-config.json
[GET] /credentials.json
[GET] /api/.env
[GET] /@fs/app/.env
[GET] /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ
[GET] /.env.secret
[POST] /actions
[GET] /@fs/app/.env.production
[GET] /.htpasswd
[GET] /.npmrc
[GET] /.env.bak
[GET] /@fs/.env
[GET] /railway.toml
[GET] /__vite_rsc_findSourceMapURL
[GET] /firebase-service-account.json
[GET] /.env.credentials
[GET] /.next/.env
[GET] /.env.local
[GET] /.github/workflows/deploy.yml
[GET] /@fs/root/.aws/credentials
[GET] /backend/.env
[GET] /fly.toml
[GET] /.ssh/id_ed25519
[GET] /src/.env
[GET] /.env.development
[
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
Epimetheus
2026-10-21 07:55:02
(5 days ago)
Zombie network / Bot scanner detected:
[POST] /flowise/api/v1/node-custom-function
[GET] /api/v1/au ...
show more
Zombie network / Bot scanner detected:
[POST] /flowise/api/v1/node-custom-function
[GET] /api/v1/auto_login
[POST] /icecoder/lib/file-control.php
[POST] /app
[POST] /lib/file-control.php
[GET] /.env.bak
[GET] /.env.local
[POST] /api
[GET] /.env.example
[GET] /api/w/starter/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /var/run/secrets/kubernetes.io/serviceaccount/token
[POST] /login
[POST] /admin
[GET] /userfiles
[GET] /firebase-credentials.json
[GET] /sa.json
[GET] /app/..;/.env
[GET] /assets../.env
[GET] /....//....//....//..../proc/self/environ
[GET] /cache/original/%2e%2e/.env
[GET] /build../.env
[GET] /admin%2F.env
[GET] /api/system/fileView
[GET] /.dockerenv
[GET] /api/.env/public/.env
[GET] /.terraform/terraform.tfstate
[GET] /docker-compose.dev.yml
[GET] /config/.env.staging
[GET] /dashboard/.env
[GET] /lib/.env
[GET] /.ssh/id_dsa
[GET] /privatekey.key
[GET] /application/.env.sample
[GET] /static../.env
[GET] /.env.docker
[GET] /firebase-config.js
[GET
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
Anonymous
2026-10-21 07:07:06
(5 days ago)
Automated web scanner. Requested suspicious paths: /.vite/manifest.json | /dist/manifest.json | /dis ...
show more
Automated web scanner. Requested suspicious paths: /.vite/manifest.json | /dist/manifest.json | /dist/.vite/manifest.json | /build/manifest.json, /z9x8c7v6b5-debug-trigger-tigzig.com | /dist/manifest.json | /dist/.vite/manifest.json | /build/manifest.json. UTC: 2026-10-21 06:48:02.
show less
Web App Attack
๐บ๐ธ
Epimetheus
2026-10-21 07:05:02
(5 days ago)
Zombie network / Bot scanner detected:
[POST] /api/v1/node-custom-function
[POST] /flowise/api/v1/n ...
show more
Zombie network / Bot scanner detected:
[POST] /api/v1/node-custom-function
[POST] /flowise/api/v1/node-load-method/customMCP
[POST] /api/v1/node-load-method/customMCP
[POST] /icecoder/lib/file-control.php
[POST] /icecoder/lib/terminal-xhr.php
[POST] /settings
[GET] /@fs/../.env
[GET] /.zshrc
[GET] /google-services.json
[GET] /compose.yaml
[GET] /.env.prod
[GET] /vercel.json
[GET] /.aws/credentials
[GET] /netlify.toml
[GET] /compose.yml
[GET] /key.json
[GET] /build/.env
[GET] /firebase-service-account.json
[GET] /api/fs/read
[GET] /static/..;/..;/.env
[GET] /static//app/.env
[GET] /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ
[GET] /config/gcp-credentials.json
[GET] /userfiles
[GET] /cache/original/%2e%2e/%2e%2e/.env
[GET] /gcp-credentials.json
[GET] /.env_secret
[GET] /css../.env
[GET] /.ssh/id_ecdsa
[GET] /.env.key
[GET] /config/.env.dev
[GET] /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /.env.smtp
[GET] /static../.env
[GET] /docke
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-10-21 06:54:18
(5 days ago)
Scanning for exposed credentials and private keys
Hacking
๐ช๐ธ
robotstxt
2026-10-21 06:17:24
(5 days ago)
34.153.200.191 - - [21/Oct/2026:06:16:25 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 10261 "https ...
show more
34.153.200.191 - - [21/Oct/2026:06:16:25 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 10261 "https://mixart.es/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-" edge="34.153.200.191"
34.153.200.191 - - [21/Oct/2026:06:16:29 +0000] "GET /wp-admin/.env HTTP/2.0" 403 10777 "https://mixart.es/wp-admin/.env" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.153.200.191"
34.153.200.191 - - [21/Oct/2026:06:16:30 +0000] "GET /apps/.env HTTP/2.0" 403 10777 "https://mixart.es/apps/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "-" edge="34.153.200.191"
34.153.200.191 - - [21/Oct/2026:06:16:30 +0000] "GET /client/.env HTTP/2.0" 403 10777 "https://mixart.es/client/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="34.153.200.191"
34.153.200.191 - - [21/Oct/2026:06:16:30
...
show less
Web App Attack
๐ฉ๐ช
dbmwebdesign
2026-10-21 06:10:03
(5 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-10-21 05:52:51
(5 days ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/191.200.153.34.bc.googleuserconte ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/191.200.153.34.bc.googleusercontent.com
show less
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-21 05:50:37
(5 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-21 05:47:56
(5 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, credential_file, ssh_keys, aws_creds, path_traversal, dotfile_probe, source_backup. Observed by 1 sensor(s); 294 hits.
show less
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-10-21 05:36:34
(5 days ago)
[ISILIA Protection v2.3] Tentative d'accรจs: /deploy/.env [RATE LIMITED - 1800s quarantine] | Pays: J ...
show more
[ISILIA Protection v2.3] Tentative d'accรจs: /deploy/.env [RATE LIMITED - 1800s quarantine] | Pays: JP | UA: Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-21 05:17:28
(5 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
rh24
2026-10-21 05:07:37
(5 days ago)
(badbots) Bad bot user-agent [redacted] from 34.153.200.191 (JP/Japan/191.200.153.34.bc.googleuserco ...
show more
(badbots) Bad bot user-agent [redacted] from 34.153.200.191 (JP/Japan/191.200.153.34.bc.googleusercontent.com)
show less
Hacking