🇧🇪
cmbplf
2026-06-12 05:40:10
(1 week ago)
409 requests with url.path *.env
Brute-Force
Bad Web Bot
🇨🇭
🇨🇭 Hosting
2026-06-12 05:10:21
(1 week ago)
Automated WAF report: 100-125 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇩🇪
Melle
2026-06-11 22:36:30
(1 week ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 34.88.120.15 triggered 5 events ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 34.88.120.15 triggered 5 events | Detected: 2026-06-11T22:36:29.492922188Z
show less
Web App Attack
Hacking
🇳🇱
Site.eu
2026-06-11 22:14:03
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Cloud86 B.V.
2026-06-11 17:13:08
(1 week ago)
categories: DDoS Attack
DDoS Attack
🇩🇪
barbarella
2026-06-11 17:04:12
(1 week ago)
Multiple (151) times attack on https port 443: Configuration snooping in .env file (GET /.env.prod.b ...
show more
Multiple (151) times attack on https port 443: Configuration snooping in .env file (GET /.env.prod.bak)
17:04:12 Configuration snooping in .env file (GET /.env.preprod)
17:04:12 Configuration snooping in .env file (GET /.env.uat)
17:04:12 Configuration snooping in .env file (GET /.env.stage)
17:04:12 Configuration snooping in .env file (GET /.env.backup.txt)
17:04:12 Configuration snooping in .env file (GET /.env.pre-production)
17:04:12 Configuration snooping in .env file (GET /.env.live)
17:04:12 Configuration snooping in .env file (GET /.env.old)
17:04:12 Configuration snooping in .env file (GET /.env.production.bak)
show less
Hacking
Web App Attack
🇺🇸
c y
2026-06-11 15:27:09
(1 week ago)
Security Monitor detected: sensitive_path_access
Port Scan
🇲🇾
Rizzy
2026-06-11 15:10:51
(1 week ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-06-11 14:42:19
(1 week ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-06-11 12:50:53
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
2026-06-11 12:05:21
(1 week ago)
Bot / seems abusive / Apache connections: 54
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-06-11 01:06:12
(1 week ago)
Poking for env files at high rate
34.88.120.15 443 - [11/Jun/2026:01:06:12 +0000] "GET /.env.dev HT ...
show more
Poking for env files at high rate
34.88.120.15 443 - [11/Jun/2026:01:06:12 +0000] "GET /.env.dev HTTP/1.1" 404 5969 "-" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.143 YaBrowser/19.7.2.516 Yowser/2.5 Safari/537.36"
34.88.120.15 443 - [11/Jun/2026:01:06:12 +0000] "GET /.env.old HTTP/1.1" 404 5969 "-" "Mozilla/5.0 (X11; U; FreeBSD x86_64; en-US) AppleWebKit/534.16 (KHTML, like Gecko) Chrome/10.0.648.204 Safari/534.16"
34.88.120.15 443 - [11/Jun/2026:01:06:12 +0000] "GET /.env.development HTTP/1.1" 404 5969 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.35 Safari/537.36"
34.88.120.15 443 - [11/Jun/2026:01:06:12 +0000] "GET /.env.save HTTP/1.1" 404 5969 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3829.0 Safari/537.36 Edg/77.0.197.1"
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-10 22:01:53
(1 week ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇩🇪
updown.io
2026-06-10 16:23:51
(1 week ago)
{"level":"info","ts":1781108630.256817,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1781108630.256817,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.88.120.15","remote_port":"59758","client_ip":"34.88.120.15","proto":"HTTP/1.1","method":"GET","host":"tsrqponmlupdate.dcbaupdate.987654321update.dgnvuwww.www.www.www.status.quarks-erp.com","uri":"/.env","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Android; Mobile; rv:35.0) Gecko/35.0 Firefox/35.0"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"]}},"bytes_read":0,"user_id":"","duration":0.000085643,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://tsrqponmlupdate.dcbaupdate.987654321update.dgnvuwww.www.www.www.status.quarks-erp.com/.env"],"Content-Type":[]}}
{"level":"info","ts":1781108630.2616303,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.88.120.15","remote_port":"59770","client_ip":"34.88.120.15","proto":"HTTP/1.1","method":"GET","host":"tsrqponmlupdate
...
show less
DDoS Attack
Web App Attack
🇳🇱
ConsulHosting
2026-06-10 14:47:32
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack