Anonymous
2026-07-29 07:00:00
(14 hours ago)
Apache probe; attempts=2447; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.devel ...
show more
Apache probe; attempts=2447; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/configprops | /actuator/env | /actuator/mappings | /admin/.env | /api/.env | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /index.php/.env.php | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
๐ช๐ธ
alferez
2026-07-27 09:59:36
(2 days ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-27 09:11:39
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
NXTwoThou
2026-07-27 09:01:54
(2 days ago)
/.env.backup
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-07-27 09:01:37
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-07-27 04:42:42
(2 days ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
๐ฉ๐ช
macrob
2026-07-26 18:34:07
(3 days ago)
2026/07/26 18:34:04 [error] 2941814#2941814: *414356792 access forbidden by rule, client: 34.158.21. ...
show more
2026/07/26 18:34:04 [error] 2941814#2941814: *414356792 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.ssh/known_hosts HTTP/2.0", host: "erp.fastcredit.net.ua"
2026/07/26 18:34:05 [error] 2941819#2941819: *414356860 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.cursor/mcp.json HTTP/2.0", host: "erp.fastcredit.net.ua"
2026/07/26 18:34:06 [error] 2941816#2941816: *414356799 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.aider.conf.yml HTTP/2.0", host: "erp.fastcredit.net.ua"
...
show less
Web App Attack
Anonymous
2026-07-26 18:25:42
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.158.21.38 (CH/Switzerland/38.21.158. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.158.21.38 (CH/Switzerland/38.21.158.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ณ๐ฑ
Savvii
2026-07-26 15:06:22
(3 days ago)
15 attempts against mh-modsecurity-ban on byrd
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-07-26 14:49:59
(3 days ago)
2026/07/26 14:49:58 [error] 2941816#2941816: *413781078 access forbidden by rule, client: 34.158.21. ...
show more
2026/07/26 14:49:58 [error] 2941816#2941816: *413781078 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.cursor/mcp.json HTTP/2.0", host: "staging.fastcredit.net.ua"
2026/07/26 14:49:58 [error] 2941816#2941816: *413781078 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.hermes/.env HTTP/2.0", host: "staging.fastcredit.net.ua"
2026/07/26 14:49:58 [error] 2941818#2941818: *413781133 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.hermes/config.yaml HTTP/2.0", host: "staging.fastcredit.net.ua"
...
show less
Web App Attack
Anonymous
2026-07-26 14:02:42
(3 days ago)
Web attack
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-07-26 13:03:07
(3 days ago)
2026/07/26 13:03:05 [error] 2941817#2941817: *413507589 access forbidden by rule, client: 34.158.21. ...
show more
2026/07/26 13:03:05 [error] 2941817#2941817: *413507589 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.github/workflows/deploy.yml HTTP/2.0", host: "partner.fastcredit.net.ua"
2026/07/26 13:03:05 [error] 2941814#2941814: *413507591 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "partner.fastcredit.net.ua"
2026/07/26 13:03:05 [error] 2941814#2941814: *413507590 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.gitconfig HTTP/2.0", host: "partner.fastcredit.net.ua"
...
show less
Web App Attack
๐ซ๐ท
mrcrassi
2026-07-26 12:00:14
(3 days ago)
Triggered Cloudflare WAF (firewallManaged) from CH.
Action taken: BLOCK
Protocol: HTTP/2 (GET method ...
show more
Triggered Cloudflare WAF (firewallManaged) from CH.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /runtime-config.js
UA: meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
JLKnoch Software GmbH
2026-07-26 10:37:48
(3 days ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ฉ๐ช
macrob
2026-07-26 10:09:40
(3 days ago)
2026/07/26 10:09:39 [error] 2941819#2941819: *413085576 access forbidden by rule, client: 34.158.21. ...
show more
2026/07/26 10:09:39 [error] 2941819#2941819: *413085576 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "jenkins.fastcredit.net.ua"
2026/07/26 10:09:39 [error] 2941819#2941819: *413085577 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "jenkins.fastcredit.net.ua"
2026/07/26 10:09:39 [error] 2941819#2941819: *413085578 access forbidden by rule, client: 34.158.21.38, server: fn.binixo.es, request: "GET /.git-credentials HTTP/2.0", host: "jenkins.fastcredit.net.ua"
...
show less
Web App Attack