🇧🇪
cmbplf
2026-11-06 10:32:56
UTC ·
(9 hours ago)
131 requests with url.path */proc/*
Brute-Force
Bad Web Bot
2026-11-06 08:51:56
UTC ·
(11 hours ago)
Web application attack: http cve 2021 41773; Web application attack: http path traversal probing; Web application attack: http sensitive files; Probing for exposed secret / credential files
Hacking
Web App Attack
🇬🇧
Steve
2026-11-06 08:51:06
UTC ·
(11 hours ago)
Abuse of XMLRPC
Brute-Force
Web App Attack
🇩🇪
Holger
2026-11-06 08:40:51
UTC ·
(11 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇳🇱
Cyber SOC
2026-11-06 08:20:05
UTC ·
(11 hours ago)
Peaksys - 2026-11-06 08:19:42 UTC+00
Port Scan
🇳🇱
e.fierstra
2026-11-06 08:13:48
UTC ·
(11 hours ago)
excessive HTTP 404 errors
Bad Web Bot
🇩🇪
macrob
2026-11-06 05:30:04
UTC ·
(14 hours ago)
2026/11/06 05:30:03 [error] 2789052#2789052: *7494787 access forbidden by rule, client: 34.95.188.68, server: binixo.mx, request: "GET /css../.env HTTP/2.0", host: "binixo.mx", referrer: "https://www.binixo.mx/css../.env"
2026/11/06 05:30:03 [error] ...
show more
2026/11/06 05:30:03 [error] 2789052#2789052: *7494787 access forbidden by rule, client: 34.95.188.68, server: binixo.mx, request: "GET /css../.env HTTP/2.0", host: "binixo.mx", referrer: "https://www.binixo.mx/css../.env"
2026/11/06 05:30:03 [error] 2789052#2789052: *7494787 access forbidden by rule, client: 34.95.188.68, server: binixo.mx, request: "GET /dist../.env HTTP/2.0", host: "binixo.mx", referrer: "https://www.binixo.mx/dist../.env"
2026/11/06 05:30:03 [error] 2789052#2789052: *7494787 access forbidden by rule, client: 34.95.188.68, server: binixo.mx, request: "GET /build../.env HTTP/2.0", host: "binixo.mx", referrer: "https://www.binixo.mx/build../.env"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:19:04
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.188.68 (68.188.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:19:00.673061 2026] [security2:error] [pid 25076:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.188.68 (68.188.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:19:00.673061 2026] [security2:error] [pid 25076:tid 25076] [client 34.95.188.68:43584] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.lindenwoodpark.org"] [uri "/.env.supabase"] [unique_id "au1VNM_e3eeyA8leC-XrkgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Stylottica
2026-11-06 02:38:13
UTC ·
(17 hours ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
2026-11-06 01:48:03
UTC ·
(18 hours ago)
Bot / scanning and/or hacking attempts: GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/env, GET /wp-config.php.bak HTTP/2.0, GET /static/../../../a/../../../../.env HTTP/2.0, GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/e ...
show more
Bot / scanning and/or hacking attempts: GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/env, GET /wp-config.php.bak HTTP/2.0, GET /static/../../../a/../../../../.env HTTP/2.0, GET /api/w/starter/jobs_u/get_log_file/../../../../proc/self/en, GET /.next/routes-manifest.json HTTP/2.0, GET /.next/server/app/page.js HTTP/2.0, GET /.env.supabase HTTP/2.0, GET /api/system/fileView?file=/app/.env HTTP/2.0, GET /static/../../../a/../../../../proc/self/environ HTTP/2.0, POST /v1/graphql HTTP/2.0, GET /api/w/default/jobs_u/get_log_file/../../../../proc/self/en, GET /.env.monorepo HTTP/2.0, GET /.env.common HTTP/2.0, GET /api/attachments/img/avatar/..%2F..%2F..%2F..%2F..%2F.env H
show less
Hacking
Web App Attack
2026-11-06 00:59:17
UTC ·
(19 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇫🇷
Baking333
2026-11-06 00:55:48
UTC ·
(19 hours ago)
[redacted] 34.95.188.68 - - [06/Nov/2026:01:55:46 +0100] "GET /packages/api/.env HTTP/1.1" 200 169 0/12381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http ...
show more
[redacted] 34.95.188.68 - - [06/Nov/2026:01:55:46 +0100] "GET /packages/api/.env HTTP/1.1" 200 169 0/12381 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://[redacted]/go/applebot)" 443 [redacted] 34.95.188.68 - - [06/Nov/2026:01:55:46 +0100] "GET /apps/dashboard/.env HTTP/1.1" 200 169 0/12369 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://[redacted]/searchbot" 443
show less
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-06 00:22:05
UTC ·
(19 hours ago)
URL Probing: /admin/.env
Web App Attack
🇿🇦
conure.sh
2026-11-05 22:57:57
UTC ·
(21 hours ago)
csagent: score 18.4: 404 noise floor x3, spoofed crawler UA x1, secrets grab x1; 2 domain(s) in 48s
Web App Attack
🇸🇪
vaia.cloud
2026-11-05 22:25:02
UTC ·
(21 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
