🇫🇮
netman
2026-11-15 06:12:38
UTC ·
(7 minutes ago)
HTTP: 34.30.82.253 blocked because of 500 failures
...
Port Scan
Web App Attack
🇧🇾
lns.bz
2026-11-15 06:11:19
UTC ·
(8 minutes ago)
.env scanning [BY]
Web App Attack
🇺🇸
dot.mg
2026-11-15 06:02:04
UTC ·
(17 minutes ago)
Bad behaviour
Web Spam
🇬🇧
consul.to
2026-11-15 05:26:49
UTC ·
(53 minutes ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
LRob
2026-11-15 03:09:09
UTC ·
(3 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
Hacking
Web App Attack
🇨🇭
copestack
2026-11-15 02:30:15
UTC ·
(3 hours ago)
Honeypot hit on ov-9acb4e (fail2ban jail: roridula-feed)
Port Scan
🇬🇧
matbargob
2026-11-15 02:24:19
UTC ·
(3 hours ago)
CrowdSec custom/http-datacenter-abuse: 6 events 2026-11-15 02:24:19 - 02:24:21 UTC. Method: GET. Paths: /, /.git/config, /.env, /.env.local, /.env.production, /.env.staging. Status: 404. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-11-15 02:24:19 - 02:24:21 UTC. Method: GET. Paths: /, /.git/config, /.env, /.env.local, /.env.production, /.env.staging. Status: 404. UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
🇺🇸
borgsquared
2026-11-15 02:12:23
UTC ·
(4 hours ago)
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 1835 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 1836 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "POST / HTTP/ ...
show more
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 1835 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 1836 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 1837 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:22 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 1838 "-" "-" 0ms
34.30.82.253 - - [15/Nov/2026:02:12:23 +0000] "GET /.git/config HTTP/1.1" 404 19 "-" "-" 1839 "-" "-" 0ms
...
show less
Brute-Force
Web App Attack
🇺🇸
WizardsToolkit
2026-11-15 01:51:22
UTC ·
(4 hours ago)
tried to access forbidden files; attempted to access /app/.env
Web App Attack
🇨🇭
copestack
2026-11-14 23:00:05
UTC ·
(7 hours ago)
Automated detection: HTTP environment file enumeration (.env credential harvesting). 1 decisions on ov-4e5936.
Web App Attack
🇫🇷
Catalin Negru
2026-11-14 22:58:06
UTC ·
(7 hours ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇩🇪
Callum
2026-11-14 21:59:06
UTC ·
(8 hours ago)
probing for exposed files and admin pages: 180 attempts within 1 minutes, seen by web server log
Web App Attack
🇺🇸
nasset
2026-11-14 21:26:20
UTC ·
(8 hours ago)
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.30.82.253 - - [14/ ...
show more
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /.env.yml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /app/.env HTTP/1.1" 404 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /apps/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.30.82.253 - - [14/Nov/2026:13:26:20 -0800] "GET /api/.env HTTP/1.1" 403 640 "-" "Mo
...
show less
Bad Web Bot
Web App Attack
🇬🇧
oja
2026-11-14 20:18:25
UTC ·
(10 hours ago)
Aggressive web scanner
Web App Attack
🇹🇷
hostopya.com
2026-11-14 20:17:50
UTC ·
(10 hours ago)
[plesk-apache] 6 failed attempt(s). Log: [Sat Nov 14 23:17:48.923565 2026] [authz_core:error] [pid 3763072] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/lexbu.space/license.lexbu.space/.env|[Sat Nov 14 23:17 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Sat Nov 14 23:17:48.923565 2026] [authz_core:error] [pid 3763072] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/lexbu.space/license.lexbu.space/.env|[Sat Nov 14 23:17:49.128282 2026] [authz_core:error] [pid 3610664] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/lexbu.space/license.lexbu.space/.env.local|[Sat Nov 14 23:17:49.357547 2026] [authz_core:error] [pid 3767381] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/lexbu.space/license.lexbu.space/.env.production|[Sat Nov 14 23:17:49.617001 2026] [authz_core:error] [pid 3577309] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/lexbu.space/license.lexbu.space/.env.staging|[Sat Nov 14 23:17:49.832014 2026] [authz_core:error] [pid 3637410] [client 34.30.82.253:0] AH01630: client denied by server configuration: /var/www/vhosts/le
show less
Brute-Force
Web App Attack