🇮🇹
VHosting
2026-11-06 21:45:04
UTC ·
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-06 20:56:41
UTC ·
(7 hours ago)
34.53.201.131 - - [06/Nov/2026:20:56:40 +0000] "GET /roundcube/sitemap.xml HTTP/2.0" 404 997 "https://webmail.gwynethllewelyn.net/sitemap.xml" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
Bad Web Bot
🇸🇬
Cloudkul Cloudkul
2026-11-06 20:55:52
UTC ·
(7 hours ago)
Attempted Not Found (404 status code) requests on our application, more than 30% of their total requests.
Brute-Force
Web App Attack
🇫🇮
oh.mg
2026-11-06 19:00:23
UTC ·
(9 hours ago)
[Fri Nov 06 20:00:23.296914 2026] [security2:error] [pid 3047297:tid 3047319] [client 34.53.201.131:0] [client 34.53.201.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/ ...
show more
[Fri Nov 06 20:00:23.296914 2026] [security2:error] [pid 3047297:tid 3047319] [client 34.53.201.131:0] [client 34.53.201.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "2ca.mmn.ca"] [uri "/.env_secret"] [unique_id "au4jx8tDCZBSsD0BR67yRgAAAJQ"]
[Fri Nov 06 20:00:23.315788 2026] [security2:error] [pid 3031171:tid 3031196] [client 34.53.201.131:0] [client 34.53.201.131] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anom
...
show less
Web App Attack
Bad Web Bot
🇩🇪
updown.io
2026-11-06 17:19:50
UTC ·
(11 hours ago)
{"level":"info","ts":1793985589.4747567,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.53.201.131","remote_port":"53082","client_ip":"34.53.201.131","proto":"HTTP/2.0","method":"GET","host":"status.frazier.network" ...
show more
{"level":"info","ts":1793985589.4747567,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.53.201.131","remote_port":"53082","client_ip":"34.53.201.131","proto":"HTTP/2.0","method":"GET","host":"status.frazier.network","uri":"/","headers":{"X-Proxyuser-Ip":["172.23.153.110"],"X-Remote-Ip":["172.23.153.110"],"True-Client-Ip":["172.23.153.110"],"X-Forwarded-For":["172.23.153.110"],"User-Agent":["Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"],"X-Originating-Ip":["172.23.153.110"],"X-Remote-Addr":["172.23.153.110"],"X-Client-Ip":["172.23.153.110"],"Forwarded":["for=172.23.153.110"],"X-Nextjs-Data":["1"],"Accept":["*/*"],"X-Custom-Ip-Authorization":["172.23.153.110"],"Accept-Encoding":["gzip"],"Cluster-Client-Ip":["172.23.153.110"],"X-Real-Ip":["172.23.153.110"],"Referer":["https://frazier.network/.git/HEAD"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware
...
show less
DDoS Attack
Web App Attack
🇫🇷
Jimbo67
2026-11-06 16:44:48
UTC ·
(12 hours ago)
Cloudflare WAF: 48 hits in 30s | action=block | abuse=suspicious_probe | categories=19,21 | rule_id=3329c9d804134f3e89780d69bfd872dc | URIs=/.docker/.env,/.env.bak,/.env.dev,/.env.development,/.env.php.bak | confidence=0.89
Bad Web Bot
Web App Attack
🇨🇦
CentiDevOps
2026-11-06 15:48:39
UTC ·
(13 hours ago)
Web app scan: 215 requests in 4 s across 2 domains (301/404/444). Paths: /.env.prod, /assets../.env, /build../.env (+48 more). Sample: 2026-11-06T15:48:39Z "GET /js../.env" 301
Hacking
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-06 14:40:50
UTC ·
(14 hours ago)
2026/11/06 14:40:48 [error] 3084#3084: *1219750 access forbidden by rule, client: 34.53.201.131, server: projects.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "projects.betatechnologies.info"
2026/11/06 14:40:48 [error] 3084#30 ...
show more
2026/11/06 14:40:48 [error] 3084#3084: *1219750 access forbidden by rule, client: 34.53.201.131, server: projects.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "projects.betatechnologies.info"
2026/11/06 14:40:48 [error] 3084#3084: *1219750 access forbidden by rule, client: 34.53.201.131, server: projects.betatechnologies.info, request: "GET /assets../.env HTTP/2.0", host: "projects.betatechnologies.info"
2026/11/06 14:40:49 [error] 3084#3084: *1219750 access forbidden by rule, client: 34.53.201.131, server: projects.betatechnologies.info, request: "GET /files../.env HTTP/2.0", host: "projects.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-11-06 13:00:35
UTC ·
(15 hours ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-11-06 12:45:44
UTC ·
(16 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
agenciahypelab.com.br
2026-11-06 11:51:50
UTC ·
(16 hours ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
🇺🇸
freehosts.eu
2026-11-06 11:43:20
UTC ·
(17 hours ago)
Triggered Cloudflare WAF (firewallCustom) from BE.
Action: BLOCK | Protocol: HTTP/2 (GET) | Endpoint: /public../.env | UA: Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot) • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
Bad Web Bot
🇲🇾
Rizzy
2026-11-06 11:38:01
UTC ·
(17 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-06 10:05:48
UTC ·
(18 hours ago)
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /laravel/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbi ...
show more
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /laravel/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:45 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /wp/.env HTTP/2.0", host: "www.betatechnologies.info"
2026/11/06 10:05:46 [error] 3084#3084: *1135397 access forbidden by rule, client: 34.53.201.131, server: [redacted], request: "GET /cache/original/%2e%2e/%2e%2e/.env HTTP/2.0", host: "www.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇩🇪
FeG Deutschland
2026-11-06 10:00:38
UTC ·
(18 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
