๐ง๐ท
mateus.vicente
2026-08-28 23:47:05
(6 minutes ago)
[2026-08-28T23:47:04Z] Requests to sensitive Apache endpoints and path traversal patterns. (srv-app)
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
febrian.de
2026-08-28 22:49:05
(1 hour ago)
Malicious HTTP(S) probing detected by Fail2Ban
Web App Attack
Anonymous
2026-08-28 21:48:23
(2 hours ago)
34.59.70.226 - - [28/Aug/2026:23:48:22 +0200] "GET /.env.local HTTP/1.1" 404 11809 "-" "crusader-wor ...
show more
34.59.70.226 - - [28/Aug/2026:23:48:22 +0200] "GET /.env.local HTTP/1.1" 404 11809 "-" "crusader-worker/1.0"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-08-28 21:07:09
(2 hours ago)
Automated web scanner. Requested suspicious paths: /.env.production | /_ignition/health-check | /.en ...
show more
Automated web scanner. Requested suspicious paths: /.env.production | /_ignition/health-check | /.env.local. UTC: 2026-08-28 20:55:31.
show less
Web App Attack
Anonymous
2026-08-28 20:14:25
(3 hours ago)
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worke ...
show more
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.69.59.70
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.dev HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.70.179.218
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.70.179.218
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.save HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.71.254.178
34.59.70.226 - - [28/Aug/2026:15:14:23 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 104.22.62.197
34.59.70.226 - - [28/Aug/2026:15:14:24 -0500] "GET /.env.example HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.69.17.112
34.59.70.226 - - [28/Aug/2026:15:14:24 -0500] "GET /.env HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.69.17.112
34.59.70.226 - - [28/Aug/2026:15:14:24 -0500] "GET /.env.old HTTP/1.1" 403 199 "-" "crusader-worker/1.0" 172.69.17.112
34.59.70.226 - - [28/Aug/2026:15:
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-08-28 19:11:03
(4 hours ago)
[28/Aug/2026:22:11:03 +0300] -- 34.59.70.226 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env. ...
show more
[28/Aug/2026:22:11:03 +0300] -- 34.59.70.226 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env.production HTTP/1.1
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 17:53:06
(6 hours ago)
34.59.70.226 detected on srv01
Brute-Force
๐ฉ๐ช
rzk
2026-08-28 17:07:02
(6 hours ago)
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-eve ...
show more
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: GOOGLE-CLOUD-PLATFORM. Country: US. Timestamp: 2026-08-28T17:07:02+00:00.
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-28 16:26:48
(7 hours ago)
34.59.70.226 - - [28/Aug/2026:16:26:48 +0000] "GET /.env.example HTTP/1.1" 302 445 "-" "crusader-wor ...
show more
34.59.70.226 - - [28/Aug/2026:16:26:48 +0000] "GET /.env.example HTTP/1.1" 302 445 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Nevermind
2026-08-28 15:12:37
(8 hours ago)
34.59.70.226 - - [28/Aug/2026:17:12:37 +0200] "GET /.env.save HTTP/1.1" 403 5663 "-" "crusader-worke ...
show more
34.59.70.226 - - [28/Aug/2026:17:12:37 +0200] "GET /.env.save HTTP/1.1" 403 5663 "-" "crusader-worker/1.0"
34.59.70.226 - - [28/Aug/2026:17:12:37 +0200] "GET /.env.production HTTP/1.1" 403 5663 "-" "crusader-worker/1.0"
34.59.70.226 - - [28/Aug/2026:17:12:37 +0200] "GET /.env HTTP/1.1" 403 5663 "-" "crusader-worker/1.0"
34.59.70.226 - - [28/Aug/2026:17:12:37 +0200] "GET /.env.local HTTP/1.1" 403 5663 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐บ๐ธ
oralunal
2026-08-28 13:52:05
(10 hours ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-28 12:59:21
(10 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
๐ฎ๐น
Inartis
2026-08-28 12:32:33
(11 hours ago)
34.59.70.226 - - [28/Aug/2026:14:32:32 +0200] "GET /.env HTTP/1.1" 302 405 "-" "crusader-worker/1.0" ...
show more
34.59.70.226 - - [28/Aug/2026:14:32:32 +0200] "GET /.env HTTP/1.1" 302 405 "-" "crusader-worker/1.0"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-28 11:56:35
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.59.70.226 (226.70.59.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.59.70.226 (226.70.59.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 07:56:28.628192 2026] [security2:error] [pid 743681:tid 744363] [client 34.59.70.226:54624] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.progenicyteorg.pwrcoupling.com"] [uri "/wp-config.php.bak"] [unique_id "apF3bKzKk__5QR0Jy--9kAAAAFc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-08-28 11:30:34
(12 hours ago)
Web attack/malicious scanning detected
Web App Attack