🇺🇸
mnsf
2026-11-13 20:05:08
UTC ·
(9 hours ago)
Too many Status 40X (27)
Brute-Force
Web App Attack
🇨🇦
Sakusen
2026-11-13 05:21:19
UTC ·
(1 day ago)
Automated web attack: 13343 reqs, 264 paths probed, 11950 returned 404; probed: 120 .env, 77 other, 14 .json, 11 script, 11 secret, 9 .php, 7 .yml, 3 .git, 3 .jsp, 3 cloud-cred, 2 .xml, 2 backup, 1 config, 1 log
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-13 03:21:19
UTC ·
(1 day ago)
[Thu Nov 12 22:21:16.872733 2026] [authz_core:error] [pid 2308262:tid 140555111208704] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/docker-compose.yaml
[Thu Nov 12 22:21:17.559540 2026] [authz_core ...
show more
[Thu Nov 12 22:21:16.872733 2026] [authz_core:error] [pid 2308262:tid 140555111208704] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/docker-compose.yaml
[Thu Nov 12 22:21:17.559540 2026] [authz_core:error] [pid 2308262:tid 140554071435008] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/server.key
[Thu Nov 12 22:21:18.639203 2026] [authz_core:error] [pid 2344597:tid 140555077572352] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/wp-config.old
[Thu Nov 12 22:21:19.182553 2026] [authz_core:error] [pid 2344597:tid 140555211855616] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/config.js
[Thu Nov 12 22:21:19.193212 2026] [authz_core:error] [pid 2308260:tid 140553794606848] [client 34.158.48.181:0] AH01630: client denied by server configuration: /usr/share/psa-roundcube/api
...
show less
Web App Attack
🇺🇸
IndigoRidge
2026-11-12 23:40:21
UTC ·
(1 day ago)
34.158.48.181 - - [12/Nov/2026:18:40:20 -0500] "GET /laravel/.env HTTP/1.1" 404 5627 "https://keyrealestatellc.com/laravel/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.158.48.181 - - [12/Nov/2026:18:40:21 -0500] ...
show more
34.158.48.181 - - [12/Nov/2026:18:40:20 -0500] "GET /laravel/.env HTTP/1.1" 404 5627 "https://keyrealestatellc.com/laravel/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.158.48.181 - - [12/Nov/2026:18:40:21 -0500] "GET /wp/.env HTTP/1.1" 404 5627 "https://keyrealestatellc.com/wp/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.158.48.181 - - [12/Nov/2026:18:40:21 -0500] "GET /storage/.env HTTP/1.1" 404 5627 "https://keyrealestatellc.com/storage/.env" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
...
show less
Web App Attack
🇺🇸
brightenfield
2026-11-12 22:31:06
UTC ·
(1 day ago)
Web App Attack
Web App Attack
🇺🇸
IndigoRidge
2026-11-12 21:28:37
UTC ·
(1 day ago)
34.158.48.181 - - [12/Nov/2026:16:28:35 -0500] "GET /laravel/.env HTTP/1.1" 404 42104 "https://keoweeliving.com/laravel/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Appl ...
show more
34.158.48.181 - - [12/Nov/2026:16:28:35 -0500] "GET /laravel/.env HTTP/1.1" 404 42104 "https://keoweeliving.com/laravel/.env" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.158.48.181 - - [12/Nov/2026:16:28:36 -0500] "GET /storage/.env HTTP/1.1" 404 42104 "https://keoweeliving.com/storage/.env" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
34.158.48.181 - - [12/Nov/2026:16:28:36 -0500] "GET /wp/.env HTTP/1.1" 404 42104 "https://keoweeliving.com/wp/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
...
show less
Web App Attack
🇨🇦
Anytech
2026-11-12 20:46:25
UTC ·
(1 day ago)
Blocked by ConnMonitor
Web App Attack
🇨🇦
Sakusen
2026-11-12 19:35:36
UTC ·
(1 day ago)
Automated web attack: 1262 reqs, 264 paths probed, 1136 returned 404; probed: 108 .env, 77 other, 23 .json, 12 secret, 11 script, 8 .php, 7 .yml, 4 config, 3 .git, 3 .jsp, 3 cloud-cred, 2 .xml, 2 backup, 1 log
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-11-12 19:05:29
UTC ·
(1 day ago)
Too many Status 40X (26)
Brute-Force
Web App Attack
Anonymous
2026-11-12 18:50:08
UTC ·
(1 day ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection