🇹🇷
hostopya.com
2026-11-10 05:25:36
UTC ·
(2 hours ago)
[plesk-apache] 6 failed attempt(s). Log: [Tue Nov 10 08:25:31.436350 2026] [authz_core:error] [pid 952578] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyunmadolabi.com.tr/httpdocs/credentials.ini|[Tue Nov ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Tue Nov 10 08:25:31.436350 2026] [authz_core:error] [pid 952578] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyunmadolabi.com.tr/httpdocs/credentials.ini|[Tue Nov 10 08:25:31.615894 2026] [authz_core:error] [pid 846742] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyunmadolabi.com.tr/httpdocs/env.txt|[Tue Nov 10 08:25:34.461349 2026] [authz_core:error] [pid 952518] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyunmadolabi.com.tr/httpdocs/.htaccess|[Tue Nov 10 08:25:35.488156 2026] [authz_core:error] [pid 952576] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyunmadolabi.com.tr/httpdocs/credentials.ini|[Tue Nov 10 08:25:35.674740 2026] [authz_core:error] [pid 1093235] [client 34.53.147.106:0] AH01630: client denied by server configuration: /var/www/vhosts/soyu
show less
Brute-Force
Web App Attack
🇬🇧
thetomtaylor.co.uk
2026-11-10 05:08:01
UTC ·
(2 hours ago)
Fail2Ban - [WEB]Custom exploit pattern detected on customexploits ... [ice01,ice02,wa01,wa02]
Hacking
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
voormedia
2026-11-10 04:47:20
UTC ·
(2 hours ago)
Accessed trap at '/.aws/credentials'
Web App Attack
🇩🇪
gadix
2026-11-10 04:45:55
UTC ·
(2 hours ago)
[10/Nov/2026:05:45:54.337276 +0100] avKhgtVB9FYX-pniG7AZBwAAAM8 34.53.147.106 40172 127.0.0.1 7081
[10/Nov/2026:05:45:54.340929 +0100] avKhgtVB9FYX-pniG7AZCQAAAMk 34.53.147.106 40188 127.0.0.1 7081
[10/Nov/2026:05:45:54.347332 +0100] avKhgtVB9FYX-pni ...
show more
[10/Nov/2026:05:45:54.337276 +0100] avKhgtVB9FYX-pniG7AZBwAAAM8 34.53.147.106 40172 127.0.0.1 7081
[10/Nov/2026:05:45:54.340929 +0100] avKhgtVB9FYX-pniG7AZCQAAAMk 34.53.147.106 40188 127.0.0.1 7081
[10/Nov/2026:05:45:54.347332 +0100] avKhgtVB9FYX-pniG7AZCgAAANQ 34.53.147.106 40218 127.0.0.1 7081
...
show less
Web App Attack
🇩🇪
curiosity
2026-11-10 04:45:05
UTC ·
(2 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-11-10 04:40:43
UTC ·
(2 hours ago)
Probing for exposed secret / credential files; Web application attack: http sensitive files
Hacking
Web App Attack
🇺🇸
consti.art
2026-11-10 04:21:52
UTC ·
(3 hours ago)
Web vulnerability scanning (146 probes), looking for configuration and credential files, PHP scripts and web shells, server status and info pages, known vulnerable URLs, exposed version control folders, backup and database dump files
User-Agent: Mozi ...
show more
Web vulnerability scanning (146 probes), looking for configuration and credential files, PHP scripts and web shells, server status and info pages, known vulnerable URLs, exposed version control folders, backup and database dump files
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
147 HTTP requests between 2026-11-08 12:52 and 2026-11-10 04:21 UTC
show less
Bad Web Bot
🇺🇸
FreeMyIP
2026-11-10 04:20:47
UTC ·
(3 hours ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
🇺🇸
nolij
2026-11-10 04:12:47
UTC ·
(3 hours ago)
Web scanning/probing: 15 blocked requests, auto-banned by fail2ban
Web App Attack
🇬🇧
kie
2026-11-10 03:57:30
UTC ·
(3 hours ago)
10-11-2026:03:57:00UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.env,/.aws/ path:/.aws/ path:/.git path:/actuator/ path:/vendor/ (70 request(s)).
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-10 03:51:29
UTC ·
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-10 03:45:25
UTC ·
(3 hours ago)
2026/11/10 03:45:22 [error] 361491#361491: *5377 access forbidden by rule, client: 34.53.147.106, server: lisboa.betatechnologies.info, request: "GET /.docker/.env HTTP/2.0", host: "lisboa.betatechnologies.info"
2026/11/10 03:45:22 [error] 361491#361 ...
show more
2026/11/10 03:45:22 [error] 361491#361491: *5377 access forbidden by rule, client: 34.53.147.106, server: lisboa.betatechnologies.info, request: "GET /.docker/.env HTTP/2.0", host: "lisboa.betatechnologies.info"
2026/11/10 03:45:22 [error] 361491#361491: *5377 access forbidden by rule, client: 34.53.147.106, server: lisboa.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "lisboa.betatechnologies.info"
2026/11/10 03:45:22 [error] 361491#361491: *5377 access forbidden by rule, client: 34.53.147.106, server: lisboa.betatechnologies.info, request: "GET /.docker/laravel/app/.env HTTP/2.0", host: "lisboa.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇬🇧
pinguin
2026-11-10 03:37:06
UTC ·
(3 hours ago)
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /demo/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudf ...
show more
Triggered Cloudflare WAF (firewallManaged) from BE.
Action taken: LOG
Protocol: HTTP/2 (GET method)
Endpoint: /demo/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇺🇸
netlinkpro
2026-11-10 03:36:00
UTC ·
(3 hours ago)
Web scanning: probed for /wp-config.php.bak. 2 requests, all refused (HTTP 4xx), 2026-11-10 03:36–03:36 UTC.
Web App Attack
🇩🇪
macrob
2026-11-10 03:33:55
UTC ·
(3 hours ago)
2026/11/10 03:33:54 [error] 1367339#1367339: *22148983 access forbidden by rule, client: 34.53.147.106, server: fn.binixo.es, request: "GET /.env.anthropic HTTP/2.0", host: "hapimax.wellbin.org"
2026/11/10 03:33:54 [error] 1367337#1367337: *22148967 ...
show more
2026/11/10 03:33:54 [error] 1367339#1367339: *22148983 access forbidden by rule, client: 34.53.147.106, server: fn.binixo.es, request: "GET /.env.anthropic HTTP/2.0", host: "hapimax.wellbin.org"
2026/11/10 03:33:54 [error] 1367337#1367337: *22148967 access forbidden by rule, client: 34.53.147.106, server: fn.binixo.es, request: "GET /.docker/config.json HTTP/2.0", host: "hapimax.wellbin.org"
2026/11/10 03:33:54 [error] 1367339#1367339: *22148984 access forbidden by rule, client: 34.53.147.106, server: fn.binixo.es, request: "GET /.boto HTTP/2.0", host: "hapimax.wellbin.org"
...
show less
Web App Attack
