🇳🇱
oisecnet
2026-11-06 22:01:52
UTC ·
(15 hours ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-11-06. 670 requests from this IP.
Port Scan
Hacking
Web App Attack
🇺🇸
Secure Gateway®️
2026-11-06 22:00:22
UTC ·
(15 hours ago)
Report By Secure Gateway Security Team: XSS Injection Attempt Detected
Hacking
🇺🇸
ALSCO®️
2026-11-06 22:00:22
UTC ·
(15 hours ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
Hacking
🇮🇩
fazar
2026-11-06 19:21:29
UTC ·
(18 hours ago)
bad-behavior: 15 attempts from 34.187.185.70 on node: bdj02
Exploited Host
Web App Attack
Anonymous
2026-11-06 12:01:44
UTC ·
(1 day ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Events=45; Hosts=www.incognet.io; Paths=/.env.prod.bak,/.env.production.bak,/_payload.json,/api/auth/session,/config/custom-environment-variables.json,/c ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-crawl-non_statics; Action=ban; Events=45; Hosts=www.incognet.io; Paths=/.env.prod.bak,/.env.production.bak,/_payload.json,/api/auth/session,/config/custom-environment-variables.json,/config/local.json; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Bad Web Bot
Anonymous
2026-11-06 11:04:27
UTC ·
(1 day ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-bad-user-agent; Action=ban; Events=2; Hosts=www.incognet.io; Paths=/__nuxt_config.json,/config/custom-environment-variables.json; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
Hacking
Anonymous
2026-11-06 10:05:05
UTC ·
(1 day ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=www.incognet.io; Paths=/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env,/api/console/api_server ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-path-traversal-probing; Action=ban; Events=4; Hosts=www.incognet.io; Paths=/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env,/api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ,/api/system/fileView?file=/proc/self/environ,/api/w/default/jobs_u/get_log_file/../../../../proc/self/environ; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Port Scan
Web App Attack
🇩🇪
LRob
2026-11-06 09:15:04
UTC ·
(1 day ago)
Secret file probe | method: GET | path: /js../.env, /laravel../.env, /laravel../config/database.php (+7 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/, Mozi ...
show more
Secret file probe | method: GET | path: /js../.env, /laravel../.env, /laravel../config/database.php (+7 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/, Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot, CCBot/2.0 (https://commoncrawl.org/faq/) (+4 more) | 2026-11-06 09:15 UTC
show less
Hacking
Web App Attack
🇩🇪
MarkGGN
2026-11-06 09:09:00
UTC ·
(1 day ago)
Web attack. 34.187.185.70 - - [06/Nov/2026:10:08:59 +0100] "GET /admin/users HTTP/2.0" 404 131 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.187.185.70 - - [06/Nov/2026:10:09: ...
show more
Web attack. 34.187.185.70 - - [06/Nov/2026:10:08:59 +0100] "GET /admin/users HTTP/2.0" 404 131 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" 34.187.185.70 - - [06/Nov/2026:10:09:00 +0100] "GET /v2/.env HTTP/2.0" 404 146 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://[HOST]/)"
show less
Web App Attack
Anonymous
2026-11-06 09:01:02
UTC ·
(1 day ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-cve-2021-41773; Action=ban; Events=1; Hosts=www.incognet.io; Paths=/cache/original/%2e%2e/%2e%2e/.env; Country=US; ASN=396982 GOOGLE-CLOUD-PLATFORM
Hacking
Web App Attack
🇩🇪
XICTRON
2026-11-06 08:45:05
UTC ·
(1 day ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
Anonymous
2026-11-06 08:38:42
UTC ·
(1 day ago)
Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇩🇪
Viveronese
2026-11-06 08:36:39
UTC ·
(1 day ago)
HTTP vulnerability scanning
Web App Attack
🇩🇰
floyd_dk
2026-11-06 08:36:27
UTC ·
(1 day ago)
34.187.185.70 - - [06/Nov/2026:08:36:26 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.187.185.70 - - [06/Nov/2026:08:36:26 +0000] "GET /si ...
show more
34.187.185.70 - - [06/Nov/2026:08:36:26 +0000] "GET /sitemap.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.187.185.70 - - [06/Nov/2026:08:36:26 +0000] "GET /sitemap_index.xml HTTP/2.0" 404 153 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.187.185.70 - - [06/Nov/2026:08:36:27 +0000] "GET /kmdxdeekxl06qzedhobi HTTP/2.0" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.187.185.70 - - [06/Nov/2026:08:36:27 +0000] "GET /webpack-stats.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.187.185.70 - - [06/Nov/2026:08:36:27 +0000] "GET /asset-manifest.json HTTP/2.0" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari
...
show less
Web App Attack
🇩🇪
NewGastroline
2026-11-06 08:25:07
UTC ·
(1 day ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack