Anonymous
2026-10-14 18:19:44
(1 day ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Back ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: BE, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-14 11:51:01
(1 day ago)
"GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1"
Hacking
Web App Attack
๐ฉ๐ช
pscriptos
2026-10-14 02:19:39
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ฑ
BlueWire Hosting
2026-10-14 01:04:43
(2 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
๐ฉ๐ช
Skyrider
2026-10-14 00:21:45
(2 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 22:59:28
(2 days ago)
[ti-17al] Excessive 404 errors (web scanning): 121 suspicious requests detected by fail2ban jail apa ...
show more
[ti-17al] Excessive 404 errors (web scanning): 121 suspicious requests detected by fail2ban jail apache-404. Example: 34.156.0.41 - - [14/Oct/2026:00:59:27 +0200] "GET /pkg/.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.156.0.41 - - [14/Oct/2026:00:59:27 +0200] "GET /panel/.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.156.0.41 - - [14/Oct/2026:00:59:27 +0200] "GET /shared/.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.156.0.41 - - [14/Oct/2026:00:59:27 +0
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-13 22:24:42
(2 days ago)
[Wed Oct 14 00:24:41.976511 2026] [access_compat:error] [pid 1802823:tid 1802968] [client 34.156.0.4 ...
show more
[Wed Oct 14 00:24:41.976511 2026] [access_compat:error] [pid 1802823:tid 1802968] [client 34.156.0.41:36528] AH01797: client denied by server configuration: /var/www/nextcloud/config/env
[Wed Oct 14 00:24:42.256494 2026] [access_compat:error] [pid 1802771:tid 1802830] [client 34.156.0.41:36618] AH01797: client denied by server configuration: /var/www/nextcloud/config/.env.local
[Wed Oct 14 00:24:42.256527 2026] [access_compat:error] [pid 1802823:tid 1802935] [client 34.156.0.41:36628] AH01797: client denied by server configuration: /var/www/nextcloud/config/.env.dev
[Wed Oct 14 00:24:42.277799 2026] [access_compat:error] [pid 1802772:tid 1802915] [client 34.156.0.41:36660] AH01797: client denied by server configuration: /var/www/nextcloud/config/.env.production
[Wed Oct 14 00:24:42.290748 2026] [access_compat:error] [pid 1802772:tid 1802849] [client 34.156.0.41:36718] AH01797: client denied by server configuration: /var/www/nextcloud/config/.env.staging
...
show less
Brute-Force
SSH
๐ณ๐ฑ
Savvii
2026-10-13 22:16:01
(2 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-13 21:58:46
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-10-13 20:44:41
(2 days ago)
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (c ...
show more
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /admin%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.156.0.41 - - [13/Oct/2026:22:44:41 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
...
show less
Brute-Force
SSH
๐ฉ๐ช
paissangroup
2026-10-13 20:20:44
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ฒ๐พ
Rizzy
2026-10-13 20:13:05
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-10-13 19:58:31
(2 days ago)
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 ...
show more
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /dashboard%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.156.0.41 - - [13/Oct/2026:21:58:29 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Brute-Force
SSH
๐ง๐ช
cmbplf
2026-10-13 19:28:53
(2 days ago)
411 requests with url.path */@fs/*
219 requests with url.path */proc/*
143 requests with url.path ...
show more
411 requests with url.path */@fs/*
219 requests with url.path */proc/*
143 requests with url.path *credentials.json
126 requests with url.path *.ssh/*
show less
Brute-Force
Bad Web Bot
๐บ๐ธ
dot.mg
2026-10-13 18:53:04
(2 days ago)
Bad behaviour
Web Spam