🇳🇱
homeshowdomain.nl
2026-11-06 23:01:57
UTC ·
(2 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-11-06 06:02:27
UTC ·
(3 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 05:25:03
UTC ·
(3 days ago)
34.7.157.173 - - [05/Nov/2026:23:25:00 -0600] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.7.157.173
34.7.157.173 - - [05/Nov/2026:23 ...
show more
34.7.157.173 - - [05/Nov/2026:23:25:00 -0600] "GET /.env.supabase HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.7.157.173
34.7.157.173 - - [05/Nov/2026:23:25:00 -0600] "GET /.env.dev.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 34.7.157.173
34.7.157.173 - - [05/Nov/2026:23:25:01 -0600] "GET /.env.preprod HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" 34.7.157.173
34.7.157.173 - - [05/Nov/2026:23:25:01 -0600] "GET /.env.secret HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" 34.7.157.173
34.7.157.173 - - [05/Nov/2026:23:25:01 -0600] "GET /.env.production.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://opena
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇹
penguin-solutions.at
2026-11-06 05:20:35
UTC ·
(3 days ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
🇫🇷
ingroscart.it
2026-11-06 04:42:35
UTC ·
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷
largo-it.net
2026-11-06 04:09:07
UTC ·
(3 days ago)
[06/Nov/2026:05:09:03.729] HTTP 404 - GET https://finance.largo.fr/.zshrc
[06/Nov/2026:05:09:05.512] HTTP 404 - GET https://finance.largo.fr/.vercel/project.json
[06/Nov/2026:05:09:05.514] HTTP 404 - GET https://finance.largo.fr/.next/required-server ...
show more
[06/Nov/2026:05:09:03.729] HTTP 404 - GET https://finance.largo.fr/.zshrc
[06/Nov/2026:05:09:05.512] HTTP 404 - GET https://finance.largo.fr/.vercel/project.json
[06/Nov/2026:05:09:05.514] HTTP 404 - GET https://finance.largo.fr/.next/required-server-files.json
[06/Nov/2026:05:09:05.515] HTTP 404 - GET https://finance.largo.fr/.netlify/state.json
[06/Nov/2026:05:09:05.516] HTTP 404 - GET https://finance.largo.fr/.output/server/index.mjs
[06/Nov/2026:05:09:05.534] HTTP 404 - GET https://finance.largo.fr/.next/routes-manifest.json
[06/Nov/2026:05:09:05.544] HTTP 404 - GET https://finance.largo.fr/.next/server/pages/index.js
[06/Nov/2026:05:09:06.661] HTTP 404 - GET https://finance.largo.fr/.pypirc
show less
Hacking
Bad Web Bot
Web App Attack
🇳🇱
mieg
2026-11-06 03:56:51
UTC ·
(3 days ago)
Web vulnerability probing
Brute-Force
Web App Attack
🇫🇷
ingroscart.it
2026-11-06 03:34:50
UTC ·
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted])
Bad Web Bot
🇫🇷
ingroscart.it
2026-11-06 03:09:08
UTC ·
(3 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
🇧🇪
cmbplf
2026-11-06 03:07:28
UTC ·
(3 days ago)
7.156 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇪🇸
netfactotum
2026-11-06 03:06:49
UTC ·
(3 days ago)
Hacking
Web App Attack
🇬🇧
Marten Mark
2026-11-06 02:07:42
UTC ·
(3 days ago)
34.7.157.173 - - [06/Nov/2026:02:07:40 +0000] "GET /ngsw.json HTTP/2.0" 404 23059 "https://www.cfi.co/ngsw.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.7.157.173 - - [06/No ...
show more
34.7.157.173 - - [06/Nov/2026:02:07:40 +0000] "GET /ngsw.json HTTP/2.0" 404 23059 "https://www.cfi.co/ngsw.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
34.7.157.173 - - [06/Nov/2026:02:07:40 +0000] "GET /z9x8c7v6b5-debug-trigger-www.cfi.co HTTP/2.0" 404 23059 "https://www.cfi.co/z9x8c7v6b5-debug-trigger-www.cfi.co" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.7.157.173 - - [06/Nov/2026:02:07:40 +0000] "GET /z9x8c7v6b5-debug-trigger-www.cfi.co HTTP/2.0" 404 23059 "https://www.cfi.co/z9x8c7v6b5-debug-trigger-www.cfi.co" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.7.157.173 - - [06/Nov/2026:02:07:40 +0000] "GET /dist/manifest.json HTTP/2.0" 404 23059 "https://www.cfi.co/dist/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chr
...
show less
Port Scan
Web App Attack
🇩🇪
rh24
2026-11-06 02:03:19
UTC ·
(3 days ago)
(badbots) Bad bot user-agent [redacted] from 34.7.157.173 (NL/The Netherlands/173.157.7.34.bc.googleusercontent.com)
Hacking
🇫🇷
Zundapper
2026-11-06 00:12:50
UTC ·
(3 days ago)
34.7.157.173 - - [06/Nov/2026:01:12:45 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 2334 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.7.157.173 - - [06/Nov/2026:01:12:48 +0100] "G ...
show more
34.7.157.173 - - [06/Nov/2026:01:12:45 +0100] "GET /sitemap_index.xml HTTP/2.0" 404 2334 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.7.157.173 - - [06/Nov/2026:01:12:48 +0100] "GET /ngsw.json HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.7.157.173 - - [06/Nov/2026:01:12:48 +0100] "GET /z9x8c7v6b5-debug-trigger-propc.it HTTP/2.0" 404 2334 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.7.157.173 - - [06/Nov/2026:01:12:49 +0100] "GET /94zn48qcfu8k16taei98 HTTP/2.0" 404 2334 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.7.157.173 - - [06/Nov/2026:01:12:49 +0100] "GET /gmvgy7bkra8ufcqytwwx HTTP/2.0" 404 2334 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon
...
show less
Web App Attack
Port Scan
🇱🇻
radix
2026-11-06 00:11:36
UTC ·
(3 days ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack