🇳🇱
Site.eu
2026-11-06 05:23:17
UTC ·
(23 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-11-06 05:19:00
UTC ·
(23 hours ago)
2026-11-06 06:17:16 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ) && 2026-11-06 06:17:16 AH10244: invalid URI path (/%2e%2e/.env) && 2026-11-06 06:17:16 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env ...
show more
2026-11-06 06:17:16 AH10244: invalid URI path (/icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ) && 2026-11-06 06:17:16 AH10244: invalid URI path (/%2e%2e/.env) && 2026-11-06 06:17:16 AH10244: invalid URI path (/%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env) && 104 more within 20 minutes
show less
Web App Attack
🇧🇪
cmbplf
2026-11-06 03:22:09
UTC ·
(1 day ago)
7.056 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇳🇱
Savvii
2026-11-06 02:11:39
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-11-06 01:37:15
UTC ·
(1 day ago)
(PERMBLOCK) 34.179.133.187 (DE/Germany/187.133.179.34.bc.googleusercontent.com) has had more than 4 temp blocks in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_PERMBLOCK_COUNT; Logs:
Port Scan
🇺🇸
agenciahypelab.com.br
2026-11-06 00:45:42
UTC ·
(1 day ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-11-06 00:04:12
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.133.187 (187.133.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:04:05.152226 2026] [security2:error] [pid 3824917: ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.133.187 (187.133.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 19:04:05.152226 2026] [security2:error] [pid 3824917:tid 3824924] [client 34.179.133.187:53432] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.killasgarage.bike"] [uri "/media../.env"] [unique_id "au0ZdVaiQxW-dBe0rmucqQAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CDO
2026-11-05 23:26:58
UTC ·
(1 day ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-11-05 23:22:16
UTC ·
(1 day ago)
[redacted] 34.179.133.187 - - [06/Nov/2026:00:22:15 +0100] "GET /.[redacted] HTTP/1.1" 200 169 0/10716 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443 [redacted] 34.179.133.187 - - [06/Nov/2026:00:22:15 +0100] "GET /.[re ...
show more
[redacted] 34.179.133.187 - - [06/Nov/2026:00:22:15 +0100] "GET /.[redacted] HTTP/1.1" 200 169 0/10716 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://[redacted]/search/)" 443 [redacted] 34.179.133.187 - - [06/Nov/2026:00:22:15 +0100] "GET /.[redacted] HTTP/1.1" 200 5421 0/13703 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://[redacted]/[redacted])" 443
show less
Bad Web Bot
Web App Attack
🇩🇪
NewGastroline
2026-11-05 23:10:09
UTC ·
(1 day ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-05 21:21:10
UTC ·
(1 day ago)
[ti-17al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.179.133.187 - - [05/Nov/2026:22:20:51 +0100] "GET /media../.env HTTP/2.0" 403 529 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.179.133.18 ...
show more
[ti-17al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.179.133.187 - - [05/Nov/2026:22:20:51 +0100] "GET /media../.env HTTP/2.0" 403 529 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.179.133.187 - - [05/Nov/2026:22:20:51 +0100] "GET /files../.env HTTP/2.0" 403 529 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 21:02:48
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.179.133.187 (187.133.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:02:42.300602 2026] [security2:error] [pid 14014:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.133.187 (187.133.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 16:02:42.300602 2026] [security2:error] [pid 14014:tid 14014] [client 34.179.133.187:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.koshermap.nyc"] [uri "/.env.credentials"] [unique_id "auzu8nvHvzzfpC_tLWoMBwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
netlinkpro
2026-11-05 20:57:00
UTC ·
(1 day ago)
Web scanning: probed for /images../.env, /.env.dev.local, /.env.local, /admin/.env and 4 more. 63 requests, all refused (HTTP 4xx), 2026-11-05 20:57–20:57 UTC.
Hacking
Web App Attack
🇫🇷
Octopuce
2026-11-05 20:10:50
UTC ·
(1 day ago)
Aggressive web search of vulnerable pages: /staging/.env /production/.env /v1/.env /dev/.env /apps/.env ...
Web App Attack
🇳🇱
Savvii
2026-11-05 19:52:39
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack
