🇫🇷
AGEPCom
2026-11-06 19:54:14
UTC ·
(12 minutes ago)
Smart-Ban: IP bannie via score AbuseIPDB
Brute-Force
Web App Attack
🇿🇦
vanderhost
2026-11-06 16:14:56
UTC ·
(3 hours ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /storage/logs/laravel.log via rule: /storage
Web App Attack
Bad Web Bot
🇬🇧
kie
2026-11-06 14:30:54
UTC ·
(5 hours ago)
06-11-2026:14:30:46UTC [Nginx Web Server] Suspicious web request: path:/.env path:/wp-config path:/.git path:/.env,/.git path:/.aws/ (158 request(s)).
Bad Web Bot
Web App Attack
🇧🇷
govfacil.app
2026-11-06 13:58:14
UTC ·
(6 hours ago)
(cpanel) Failed cPanel login from 34.47.49.150 (CA/Canada/150.49.47.34.bc.googleusercontent.com): 50 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-06 10:58:04 -0300] info [webmaild] 34.47.49.150 - - "GET /sitem ...
show more
(cpanel) Failed cPanel login from 34.47.49.150 (CA/Canada/150.49.47.34.bc.googleusercontent.com): 50 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CPANEL; Logs: [2026-11-06 10:58:04 -0300] info [webmaild] 34.47.49.150 - - "GET /sitemap.xml HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 10:58:05 -0300] info [webmaild] 34.47.49.150 - - "GET /apg8114vs6k0mn6a8g9n HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 10:58:06 -0300] info [webmaild] 34.47.49.150 - - "GET /.env.staging.local HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 10:58:06 -0300] info [webmaild] 34.47.49.150 - - "GET /.env.dev.local HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 10:58:06 -0300] info [webmaild] 34.47.49.150 - - "GET /railway.json HTTP/1.1" FAILED LOGIN webmaild: login attempt without username
[2026-11-06 10:58:06 -0300] info [webmaild] 34.47.49.150 - - "POST /graphql HTTP/1.1" F [truncated]
show less
Brute-Force
🇩🇪
Hazzard
2026-11-06 13:46:27
UTC ·
(6 hours ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇩🇪
Gwyneth Llewelyn
2026-11-06 13:26:12
UTC ·
(6 hours ago)
2026/11/06 13:26:10 [error] 3084#3084: *1193078 access forbidden by rule, client: 34.47.49.150, server: betatechnologies.info, request: "GET /js../.env HTTP/2.0", host: "betatechnologies.info"
2026/11/06 13:26:10 [error] 3084#3084: *1193078 access fo ...
show more
2026/11/06 13:26:10 [error] 3084#3084: *1193078 access forbidden by rule, client: 34.47.49.150, server: betatechnologies.info, request: "GET /js../.env HTTP/2.0", host: "betatechnologies.info"
2026/11/06 13:26:10 [error] 3084#3084: *1193078 access forbidden by rule, client: 34.47.49.150, server: betatechnologies.info, request: "GET /public../.env HTTP/2.0", host: "betatechnologies.info"
2026/11/06 13:26:10 [error] 3084#3084: *1193078 access forbidden by rule, client: 34.47.49.150, server: betatechnologies.info, request: "GET /img../.env HTTP/2.0", host: "betatechnologies.info"
show less
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-11-06 12:27:28
UTC ·
(7 hours ago)
34.47.49.150 - - [06/Nov/2026:12:27:22 +0000] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
34.47.49.150 - - [06/Nov/2026:12:27:25 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1. ...
show more
34.47.49.150 - - [06/Nov/2026:12:27:22 +0000] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
34.47.49.150 - - [06/Nov/2026:12:27:25 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
34.47.49.150 - - [06/Nov/2026:12:27:25 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
34.47.49.150 - - [06/Nov/2026:12:27:25 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
34.47.49.150 - - [06/Nov/2026:12:27:25 +0000] "GET /..%2f..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.47.49.150"
...
show less
Web Spam
Web App Attack
🇧🇪
cmbplf
2026-11-06 12:02:59
UTC ·
(8 hours ago)
2.384 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇺🇸
ANTI SCANNER
2026-11-06 11:37:49
UTC ·
(8 hours ago)
Scanner : /admin/users
Web Spam
🇩🇪
Mr-Money
2026-11-06 10:35:00
UTC ·
(9 hours ago)
scenario: crowdsecurity/http-probing - events: 11
Web App Attack
Hacking
🇭🇰
zhengka
2026-11-06 10:08:38
UTC ·
(9 hours ago)
ZhengKa WAF detected path_traversal. Rule: path_traversal #/(?:etc/passwd|proc/self/environ|windows/win\.ini|boot\.ini)#. Method: GET. URI: /proc/self/environ. Incident: 20F9A44D34765F90. UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google ...
show more
ZhengKa WAF detected path_traversal. Rule: path_traversal #/(?:etc/passwd|proc/self/environ|windows/win\.ini|boot\.ini)#. Method: GET. URI: /proc/self/environ. Incident: 20F9A44D34765F90. UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
show less
Hacking
Web App Attack
Anonymous
2026-11-06 10:00:06
UTC ·
(10 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-11-06 09:44:57
UTC ·
(10 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.47.49.150 - - [06/Nov/2026:10:44:52 +0100] "GET /wp/.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 09:00:19
UTC ·
(11 hours ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇰
ScamAware
2026-11-06 08:50:08
UTC ·
(11 hours ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 47. Unique request paths counted internally: 47. Cloudflare acti ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 47. Unique request paths counted internally: 47. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack