🇳🇱
homeshowdomain.nl
2026-11-06 23:01:18
UTC ·
(7 hours ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
2026-11-06 19:25:39
UTC ·
(11 hours ago)
[Fri Nov 06 20:25:37.961398 2026] [access_compat:error] [pid 369319:tid 369319] [client 34.80.224.40:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify, referer: https://lecontrarien.com/.netlify/state.json
[Fri ...
show more
[Fri Nov 06 20:25:37.961398 2026] [access_compat:error] [pid 369319:tid 369319] [client 34.80.224.40:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.netlify, referer: https://lecontrarien.com/.netlify/state.json
[Fri Nov 06 20:25:37.966198 2026] [access_compat:error] [pid 364026:tid 364026] [client 34.80.224.40:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next, referer: https://lecontrarien.com/.next/routes-manifest.json
[Fri Nov 06 20:25:37.967343 2026] [access_compat:error] [pid 357434:tid 357434] [client 34.80.224.40:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.vercel, referer: https://lecontrarien.com/.vercel/project.json
[Fri Nov 06 20:25:37.969250 2026] [access_compat:error] [pid 369320:tid 369320] [client 34.80.224.40:0] AH01797: client denied by server configuration: /var/www/wordpress/contrarien/.next, referer: https://lecontrarien.com/.next/required-server-files.json
[F
...
show less
Web Spam
Web App Attack
2026-11-06 19:03:05
UTC ·
(11 hours ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-11-06 18:40:40
UTC ·
(11 hours ago)
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.80.224.40 - - \[06/Nov/2026:19:40:18 +0100\] "GET /.env.production.bak HTTP/1.1" 301 5896 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://dev ...
show more
[ti-14al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.80.224.40 - - \[06/Nov/2026:19:40:18 +0100\] "GET /.env.production.bak HTTP/1.1" 301 5896 "-" "Mozilla/5.0 \(compatible\; Amazonbot/0.1\; +https://developer.amazon.com/support/amazonbot\)"
34.80.224.40 - - \[06/Nov/2026:19:40:18 +0100\] "GET /.env.prod.bak HTTP/1.1" 301 515 "-" "Mozilla/5.0 \(compatible\; YouBot/1.0\; +https://you.com/bot\)"
...
show less
Bad Web Bot
Web App Attack
🇫🇮
as211431.net
2026-11-06 18:26:13
UTC ·
(12 hours ago)
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.dev.local
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
http ...
show more
Triggered Cloudflare WAF (firewallCustom) from TW.
Action taken: BLOCK
Protocol: HTTP/2 (GET method)
Endpoint: /.env.dev.local
UA: Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)
This report was generated by:
https://github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
2026-11-06 18:16:01
UTC ·
(12 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Roderic
2026-11-06 17:45:00
UTC ·
(12 hours ago)
Insights: 22 probe requests within 24 hours on 1 site, e.g. /static//app/.env (no normal page views)
Web App Attack
🇧🇾
lns.bz
2026-11-06 17:36:12
UTC ·
(12 hours ago)
.env scanning [BY]
Web App Attack
🇺🇸
francelink.fr
2026-11-06 17:32:23
UTC ·
(12 hours ago)
Azure WAF blocked a request. Rule: 949110. Observed at: 2026-11-06T17:30:29.000Z.
Web App Attack
🇩🇪
raph
2026-11-06 17:25:37
UTC ·
(13 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇫🇮
Lauri Wikström
2026-11-06 17:18:49
UTC ·
(13 hours ago)
valhalla.lan:443 34.80.224.40 - - [06/Nov/2026:19:18:48 +0200] "GET /.env.production.local HTTP/2.0" 404 329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
valhalla.lan:443 34.80 ...
show more
valhalla.lan:443 34.80.224.40 - - [06/Nov/2026:19:18:48 +0200] "GET /.env.production.local HTTP/2.0" 404 329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
valhalla.lan:443 34.80.224.40 - - [06/Nov/2026:19:18:48 +0200] "GET /.env.supabase HTTP/2.0" 404 329 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
valhalla.lan:443 34.80.224.40 - - [06/Nov/2026:19:18:48 +0200] "GET /.env.credentials HTTP/2.0" 404 329 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
...
show less
Hacking
Web App Attack
2026-11-06 14:34:44
UTC ·
(15 hours ago)
Aggressive web scan
Web App Attack
🇩🇪
LRob
2026-11-06 14:14:32
UTC ·
(16 hours ago)
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html), Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatib ...
show more
Crawler ignoring refusals | ua: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html), Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) (+9 more) | path: /rclone.conf, /laravel../.env, /media../.env (+17 more)
show less
Bad Web Bot
🇳🇱
Alboweb B.V.
2026-11-06 14:11:12
UTC ·
(16 hours ago)
Bad web bot activity detected by Fail2Ban in plesk-apache-badbot jail
Bad Web Bot
🇮🇹
VHosting
2026-11-06 14:10:05
UTC ·
(16 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
