๐ซ๐ฎ
YF
2026-10-26 09:31:42
(18 hours ago)
404 errors Vulnerability scan
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-10-26 08:18:48
(19 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/11.87.17.34.bc.googleusercontent. ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/11.87.17.34.bc.googleusercontent.com
show less
Web App Attack
๐ฉ๐ช
NewWavesApp
2026-10-25 11:26:04
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.17.87.11 (IT/Italy/11.87.17.34.bc.go ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.17.87.11 (IT/Italy/11.87.17.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ท๐บ
dnsbd.tech
2026-10-25 07:02:02
(1 day ago)
nftables: Port scan (TCP:443) [srv1]
Port Scan
Hacking
๐ฌ๐ง
Marten Mark
2026-10-25 06:27:22
(1 day ago)
34.17.87.11 - - [25/Oct/2026:06:27:21 +0000] "GET /sitemaps/.env HTTP/2.0" 404 169 "-" "Mozilla/5.0 ...
show more
34.17.87.11 - - [25/Oct/2026:06:27:21 +0000] "GET /sitemaps/.env HTTP/2.0" 404 169 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
aks4226
2026-10-25 05:41:47
(1 day ago)
Bot search, attacking common web applications.
Web App Attack
๐ต๐ฑ
sefinek.net
2026-10-25 05:20:17
(1 day ago)
Triggered Cloudflare WAF (firewallCustom) from IT.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from IT.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /google-key.json | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 โข Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-10-25 05:20:10
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐น
SchiWaGoA
2026-10-25 04:30:12
(1 day ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
๐บ๐ธ
[email protected]
2026-10-25 04:07:06
(1 day ago)
CrowdSec ban: crowdsecurity/http-probing (duration: 71h59m57s)
Web App Attack
๐ณ๐ฑ
thedreamer.nl
2026-10-25 03:54:09
(1 day ago)
34.17.87.11 - - [25/Oct/2026:04:51:23 +0100] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Mac ...
show more
34.17.87.11 - - [25/Oct/2026:04:51:23 +0100] "GET /.git/config HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IT" "Turin" "45.07290" "7.68900"
34.17.87.11 - - [25/Oct/2026:04:51:23 +0100] "GET /.env HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IT" "Turin" "45.07290" "7.68900"
34.17.87.11 - - [25/Oct/2026:04:51:23 +0100] "GET /.env.local HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IT" "Turin" "45.07290" "7.68900"
34.17.87.11 - - [25/Oct/2026:04:51:24 +0100] "GET /.env.production HTTP/1.1" 401 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "IT" "Turin" "45.07290" "7.68900"
34.17.87.11 - - [25/Oct/2026:04:51:24 +0100] "GET /.env.
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
snhosting
2026-10-25 03:50:51
(1 day ago)
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.git/config HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X ...
show more
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.git/config HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.env HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.env.local HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.env.production HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.17.87.11 - - [25/Oct/2026:04:50:41 +0100] "GET /.env.staging HTTP/1.1" 505 158 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ณ๐ฑ
Site.eu
2026-10-25 02:02:36
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ง๐ท
ICS Labs
2026-10-25 01:40:00
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-25 UTC.
Hacking
๐ฉ๐ช
tsZero
2026-10-24 22:08:33
(2 days ago)
Scan example: path=/.git/config status=403
Hacking