🇳🇱
homeshowdomain.nl
2026-11-05 23:02:11
UTC ·
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-04.
Web App Attack
SSH
Hacking
Anonymous
2026-11-05 14:03:00
UTC ·
(4 days ago)
193 blocked login attempts
Brute-Force
Web App Attack
Hacking
🇧🇷
ICS Labs
2026-11-05 13:20:14
UTC ·
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
Hacking
🇺🇸
jormaster3k
2026-11-05 07:20:31
UTC ·
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇧🇪
boxed-it
2026-11-05 06:52:02
UTC ·
(4 days ago)
GET /console (Tarpitted for 11s, wasted 720B)
Web App Attack
🇳🇱
ConsulHosting
2026-11-05 05:39:21
UTC ·
(4 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
Epimetheus
2026-11-05 05:16:21
UTC ·
(4 days ago)
Zombie network / Bot scanner detected:
[GET] /cmd/.env
[GET] /.dockercfg
[GET] /pkg/.env
[GET] /static/.env
[GET] /.gitconfig
[GET] /localhost.key
[GET] /private-key
[GET] /.env.live
[GET] /env/.env
[GET] /.github/.env
[GET] /scripts/.env
[GET] /lib ...
show more
Zombie network / Bot scanner detected:
[GET] /cmd/.env
[GET] /.dockercfg
[GET] /pkg/.env
[GET] /static/.env
[GET] /.gitconfig
[GET] /localhost.key
[GET] /private-key
[GET] /.env.live
[GET] /env/.env
[GET] /.github/.env
[GET] /scripts/.env
[GET] /lib/.env
[GET] /assets/.env
[GET] /.terraform/terraform.tfstate
[GET] /panel/.env
[GET] /ml/.env
[GET] /.docker/config.json
[GET] /config/.env.production
[GET] /packages/config/.env
[GET] /media../.env
[GET] /.git/config%3F.css
[GET] /.htpasswd
[GET] /configuration.php.bak
[GET] /staging/.env
[POST] /api/graphql
[GET] /api/w/default/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /.env.dev.local
[GET] /google-credentials.json
[GET] /apps/marketing/.env
[GET] /.env.test
[GET] /var/run/secrets/kubernetes.io/serviceaccount/token
[GET] /.output/server/index.mjs
[GET] /.github/workflows/deploy.yml
[GET] /static//.env
[GET] /apps/web/.env
[GET] /pnpm-workspace.yaml
[GET] /nx.json
[GET] /account/_payload.json
[GET] /.env.creden
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇩🇰
Leif Neland
2026-11-05 05:00:04
UTC ·
(4 days ago)
Detected by CrowdSec on slim
Brute-Force
🇯🇵
VXG-NET
2026-11-05 04:48:13
UTC ·
(4 days ago)
port=80, indicator_type=info-leak
Hacking
🇺🇸
Epimetheus
2026-11-05 04:26:21
UTC ·
(4 days ago)
Zombie network / Bot scanner detected:
[GET] /document.php
[GET] /.docker/secrets.json
[GET] /application/.env.sample
[GET] /internal/.env
[GET] /.env.smtp
[GET] /docker-compose.override.yml
[GET] /.next/required-server-files.json
[GET] /api/fs/read ...
show more
Zombie network / Bot scanner detected:
[GET] /document.php
[GET] /.docker/secrets.json
[GET] /application/.env.sample
[GET] /internal/.env
[GET] /.env.smtp
[GET] /docker-compose.override.yml
[GET] /.next/required-server-files.json
[GET] /api/fs/read
[GET] /cache/original/%2e%2e/.env
[GET] /.idea/WebServers.xml
[GET] /.docker/config.json
[GET] /.output/server/index.mjs
[GET] /pipeline/.env
[GET] /wp-config.php.old
[GET] /api/system/fileView
[GET] /console
[GET] /serverless.yml
[GET] /.next/.env
[GET] /env/.env
[GET] /billing
[GET] /core/.env
[GET] /apps/.env
[GET] /apps/docs/.env
[GET] /api-keys
[GET] /swagger
[GET] /railway.json
[GET] /portal/.env
[GET] /netlify.toml
[GET] /gcp-credentials.json
[GET] /ssl/server.key
[GET] /.env.config
[GET] /.turbo/config.json
[GET] /js../.env
[GET] /nx.json
[GET] /ses.env
[GET] /config.php.bak
[GET] /.env.common
[GET] /proc/self/cgroup
[GET] /packages/config/.env
[GET] /files../.env
[GET] /config/default.json
[GET] /settings/developer
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-05 03:15:16
UTC ·
(4 days ago)
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.61.255.185 - - [05/Nov/2026:04:15:00 +0100] "GET /console HTTP/2.0" 404 1877 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/5 ...
show more
[ti-10al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.61.255.185 - - [05/Nov/2026:04:15:00 +0100] "GET /console HTTP/2.0" 404 1877 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.61.255.185 - - [05/Nov/2026:04:15:00 +0100] "GET /dashboard HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.61.255.185 - - [05/Nov/2026:04:15:00 +0100] "GET /checkout HTTP/2.0" 404 1854 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
34.61.255.185 - - [05/Nov/2026:04:15:00 +0100] "GET /login HTTP/2.0" 4
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-05 02:56:50
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
[email protected]
2026-11-05 02:28:00
UTC ·
(4 days ago)
CrowdSec ban: crowdsecurity/http-probing on auth.anomaly.cx (duration 32h)
Web App Attack
🇧🇪
cmbplf
2026-11-05 00:16:21
UTC ·
(4 days ago)
5.991 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇬🇧
andypiper
2026-11-05 00:09:20
UTC ·
(4 days ago)
CrowdSec ban for crowdsecurity/netgear-router-bruteforce
Brute-Force
Web App Attack