🇳🇱
homeshowdomain.nl
2026-11-06 22:59:28
UTC ·
(7 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-11-05.
Web App Attack
SSH
Hacking
🇧🇷
ICS Labs
2026-11-05 13:20:42
UTC ·
(1 day ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-11-05 UTC.
Hacking
🇫🇷
✨
2026-11-05 12:36:04
UTC ·
(1 day ago)
Domain : MailEnable WebMail
Rule : env
2026-11-05 12:34:24 ***hidden-privacy*** GET /api/.env/public/.env - 443 - 35.204.26.62 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; https://perplexity.ai/perplexitybot) - 4 ...
show more
Domain : MailEnable WebMail
Rule : env
2026-11-05 12:34:24 ***hidden-privacy*** GET /api/.env/public/.env - 443 - 35.204.26.62 Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; https://perplexity.ai/perplexitybot) - 404 0 2 1251 829 18 - -
show less
Hacking
SQL Injection
🇺🇸
dot.mg
2026-11-05 11:04:02
UTC ·
(1 day ago)
Bad behaviour
Web Spam
🇩🇪
BlueWire Hosting
2026-11-05 10:13:03
UTC ·
(1 day ago)
Aggressive scanning resulting into 404
Bad Web Bot
🇺🇸
TAY
2026-11-05 08:42:18
UTC ·
(1 day ago)
35.204.26.62 - - [05/Nov/2026:16:42:17 +0800] "GET /appearance/../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.204.26.62 - - [05/Nov/2026:16:42:17 ...
show more
35.204.26.62 - - [05/Nov/2026:16:42:17 +0800] "GET /appearance/../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.204.26.62 - - [05/Nov/2026:16:42:17 +0800] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
35.204.26.62 - - [05/Nov/2026:16:42:17 +0800] "GET /static/../../../a/../../../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
35.204.26.62 - - [05/Nov/2026:16:42:17 +0800] "GET /static/../../../a/../../../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.204.26.62 -
...
show less
Brute-Force
🇧🇾
lns.bz
2026-11-05 08:41:50
UTC ·
(1 day ago)
.env scanning [BY]
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-11-05 08:38:40
UTC ·
(1 day ago)
35.204.26.62 - - [05/Nov/2026:08:38:38 +0000] "GET /roundcube/sitemap.xml HTTP/2.0" 404 994 "https://webmail.betatechnologies.info/sitemap.xml" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
Bad Web Bot
🇩🇪
maxpower
2026-11-05 08:21:50
UTC ·
(1 day ago)
(junkbot) REGOLA 8 - Junk Bot Blocked 35.204.26.62 (NL/The Netherlands/62.26.204.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.204.26.62 - - [05/Nov/2026:09:21:46 +0100] "GET /s ...
show more
(junkbot) REGOLA 8 - Junk Bot Blocked 35.204.26.62 (NL/The Netherlands/62.26.204.35.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 35.204.26.62 - - [05/Nov/2026:09:21:46 +0100] "GET /sitemap.xml HTTP/2.0" 200 815 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "100.126.225.53" host=mail.lisoladeidesideri.it
show less
Port Scan
🇺🇸
Rocky Mountain Bioengineering Symposium
2026-11-05 07:37:59
UTC ·
(1 day ago)
[Thu Nov 05 00:37:56.711802 2026] [authz_core:error] [pid 226436:tid 140080565913152] [client 35.204.26.62:50202] AH01630: client denied by server configuration: /var/www/public_html/www/.env.prod.bak
[Thu Nov 05 00:37:56.725326 2026] [authz_core:err ...
show more
[Thu Nov 05 00:37:56.711802 2026] [authz_core:error] [pid 226436:tid 140080565913152] [client 35.204.26.62:50202] AH01630: client denied by server configuration: /var/www/public_html/www/.env.prod.bak
[Thu Nov 05 00:37:56.725326 2026] [authz_core:error] [pid 226436:tid 140080574305856] [client 35.204.26.62:50202] AH01630: client denied by server configuration: /var/www/public_html/www/.env.production.bak
[Thu Nov 05 00:37:58.345419 2026] [authz_core:error] [pid 226436:tid 140080599483968] [client 35.204.26.62:50202] AH01630: client denied by server configuration: /var/www/public_html/www/configuration.php.bak
...
show less
Bad Web Bot
🇳🇱
ConsulHosting
2026-11-05 06:55:00
UTC ·
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇧🇪
cmbplf
2026-11-05 06:23:59
UTC ·
(2 days ago)
1.391 requests with url.path *.env
130 requests with url.path */proc/*
Brute-Force
Bad Web Bot
🇺🇦
URAN Publishing Service
2026-11-05 06:09:56
UTC ·
(2 days ago)
[05/Nov/2026:08:09:56 +0200] -- 35.204.26.62 Ban reason: Scanner [SENSITIVE_FILES] | Request: GET /manifest.json HTTP/1.1
Bad Web Bot
Web App Attack
🇬🇧
poundawebsiteltd
2026-11-05 06:00:08
UTC ·
(2 days ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.204.26.62 (NL/The Netherlands/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.204.26.62 (NL/The Netherlands/62.2 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 35.204.26.62 (NL/The Netherlands/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 35.204.26.62 (NL/The Netherlands/62.26.204.35.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
🇫🇷
LRNP
2026-11-05 05:55:30
UTC ·
(2 days ago)
_:443 35.204.26.62 - - [05/Nov/2026:05:55:28 +0000] "GET /.env HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
Bad Web Bot
Web App Attack
