🇩🇪
Gwyneth Llewelyn
2026-10-13 18:32:14
(36 minutes ago)
2026/10/13 19:32:12 [error] 4060694#4060694: *2916283 access forbidden by rule, client: 34.186.42.17 ...
show more
2026/10/13 19:32:12 [error] 4060694#4060694: *2916283 access forbidden by rule, client: 34.186.42.170, server: api.betatechnologies.info, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/13 19:32:12 [error] 4060694#4060694: *2916284 access forbidden by rule, client: 34.186.42.170, server: api.betatechnologies.info, request: "GET /api/data/..%2f..%2f.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/13 19:32:12 [error] 4060694#4060694: *2916283 access forbidden by rule, client: 34.186.42.170, server: api.betatechnologies.info, request: "GET /client/.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
2026-10-13 18:30:05
(38 minutes ago)
CrowdSec decision: crowdsecurity/http-bad-user-agent (origin: crowdsec)
Port Scan
🇩🇪
LRob
2026-10-13 18:24:56
(43 minutes ago)
Vulnerability scanning | method: GET | path: /z9x8c7v6b5-debug-trigger-mail.boissier-sa.com, /webpac ...
show more
Vulnerability scanning | method: GET | path: /z9x8c7v6b5-debug-trigger-mail.boissier-sa.com, /webpack-stats.json, /asset-manifest.json (+17 more) | ua: Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot (+1 more)
show less
Port Scan
Web App Attack
🇧🇪
madeit
2026-10-13 17:54:27
(1 hour ago)
Web App Attack
2026-10-13 17:35:25
(1 hour ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇩🇪
updown.io
2026-10-13 17:20:27
(1 hour ago)
{"level":"info","ts":1791912025.846003,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1791912025.846003,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.186.42.170","remote_port":"59474","client_ip":"34.186.42.170","proto":"HTTP/2.0","method":"GET","host":"status.evolix.net","uri":"/assets/manifest.json","headers":{"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Google Chrome\";v=\"153\", \"Not_A Brand\";v=\"8\""],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Dest":["script"],"Sec-Ch-Ua-Platform":["\"Android\""],"X-Nextjs-Data":["1"],"Sec-Fetch-Site":["same-origin"],"Priority":["u=1"],"Sec-Ch-Ua-Mobile":["?1"],"Sec-Fetch-Mode":["no-cors"],"User-Agent":["Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"],"Accept-Language":["en-US,en;q=0.9"],"Accept":["*/*"]},"tls":{
...
show less
DDoS Attack
Web App Attack
🇧🇷
dominioz
2026-10-13 17:07:46
(2 hours ago)
2026-10-13 17:05:43 GET /build../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+Kimi-SearchB ...
show more
2026-10-13 17:05:43 GET /build../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+Kimi-SearchBot/1.0;++https://kimi.ai/) - 401 449
2026-10-13 17:05:43 GET /public../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+Qwenbot/1.0;++https://qwen.alibaba.com/) - 401 449
2026-10-13 17:05:43 GET /media../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+DeepSeekBot/1.0;++https://www.deepseek.com/) - 401 449
2026-10-13 17:05:43 GET /static../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+MoonshotBot/1.0;++https://kimi.ai/) - 401 449
2026-10-13 17:05:43 GET /images../.env - - 34.186.42.170 HTTP/2 Mozilla/5.0+(compatible;+GrokBot/1.0;++https://x.ai/) - 401 449
...
show less
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-10-13 16:40:25
(2 hours ago)
URL Probing: /@fs/.env
Web App Attack
🇩🇪
FeG Deutschland
2026-10-13 15:38:36
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇳🇱
Savvii
2026-10-13 15:34:22
(3 hours ago)
20 attempts against mh-misbehave-ban on sonic
Brute-Force
Bad Web Bot
Web App Attack
🇸🇬
Cloudkul Cloudkul
2026-10-13 15:30:22
(3 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-13 15:03:07
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇾
lns.bz
2026-10-13 15:01:22
(4 hours ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-13 14:44:47
(4 hours ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-13 14:36:26
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.186.42.170 (170.42.186.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.186.42.170 (170.42.186.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 10:36:19.346571 2026] [security2:error] [pid 32686:tid 32686] [client 34.186.42.170:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "echelonts.com"] [uri "/api/..;/.env"] [unique_id "as5B4wk2j0hVH90VpLX3zwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
