🇫🇷
SpaceHost-Server
2026-11-06 23:19:31
UTC ·
(3 days ago)
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:00:58
UTC ·
(3 days ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇳🇱
Site.eu
2026-11-06 09:22:16
UTC ·
(4 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 09:18:31
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 08:34:09
UTC ·
(4 days ago)
[ti-12al] Web exploit scanning: 9 suspicious requests detected by fail2ban jail <name>. Example: 35.241.167.186 - - \[06/Nov/2026:09:34:01 +0100\] "GET /apps/admin/.env HTTP/2.0" 404 1864 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\ ...
show more
[ti-12al] Web exploit scanning: 9 suspicious requests detected by fail2ban jail <name>. Example: 35.241.167.186 - - \[06/Nov/2026:09:34:01 +0100\] "GET /apps/admin/.env HTTP/2.0" 404 1864 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
35.241.167.186 - - \[06/Nov/2026:09:34:01 +0100\] "GET /packages/database/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 \(compatible\; Hunyuan/1.0\; +https://hunyuan.tencent.com/\)"
35.241.167.186 - - \[06/Nov/2026:09:34:01 +0100\] "GET /apps/marketing/.env HTTP/2.0" 404 1864 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
35.241.167.186 - - \[06/Nov/2026:09:34:01 +0100\] "GET /apps/api/.env HTTP/2.0" 404 1806 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bo
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-06 08:31:55
UTC ·
(4 days ago)
Web application attack: http cve 2021 41773; Web application attack: http sensitive files; Web application attack: http path traversal probing; Probing for exposed secret / credential files
Hacking
Web App Attack
Anonymous
2026-11-06 06:09:13
UTC ·
(4 days ago)
35.241.167.186 - - [06/Nov/2026:07:09:03 +0100] "GET /i1e2cw0bmpwpz2ouxeup HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:03 +0100] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0 ...
show more
35.241.167.186 - - [06/Nov/2026:07:09:03 +0100] "GET /i1e2cw0bmpwpz2ouxeup HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:03 +0100] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0100] "GET /7uhtmyoljsca15ddxe7y HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0100] "GET /dist/manifest.json HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0100] "GET /build/manifest.json HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0100] "GET /ngsw.json HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:04 +0100] "GET /dist/.vite/manifest.json HTTP/1.1" 404 30261
35.241.167.186 - - [06/Nov/2026:07:09:06 +0100] "POST /graphql HTTP/1.1" 404 29624
35.241.167.186 - - [06/Nov/2026:07:09:07 +0100] "GET /laravel../config/database.php HTTP/1.1" 404 29624
35.241.167.186 - - [06/Nov/2026:07:09:09 +0100] "POST /api/graphql HTTP/1.1" 404 29624
...
show less
Web Spam
Web App Attack
🇩🇪
nyuuzyou
2026-11-06 04:59:48
UTC ·
(4 days ago)
Web application attack requests blocked by local CrowdSec AppSec over completed HTTP/TCP on application ports 80/443. 2 matched requests; rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config. Exact source IP locally banned. Observe ...
show more
Web application attack requests blocked by local CrowdSec AppSec over completed HTTP/TCP on application ports 80/443. 2 matched requests; rules: crowdsecurity/vpatch-env-access, crowdsecurity/vpatch-git-config. Exact source IP locally banned. Observed 2026-11-06T04:59:42Z through 2026-11-06T04:59:48Z.
show less
Web App Attack
🇫🇷
fineservice
2026-11-06 04:06:03
UTC ·
(4 days ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
🇳🇱
Savvii
2026-11-06 03:58:26
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-11-06 03:21:31
UTC ·
(4 days ago)
2026/11/06 03:21:30 [error] 2789053#2789053: *7209814 access forbidden by rule, client: 35.241.167.186, server: binixo.co, request: "GET /uploads../.env HTTP/2.0", host: "www.binixo.co"
2026/11/06 03:21:30 [error] 2789054#2789054: *7209783 access for ...
show more
2026/11/06 03:21:30 [error] 2789053#2789053: *7209814 access forbidden by rule, client: 35.241.167.186, server: binixo.co, request: "GET /uploads../.env HTTP/2.0", host: "www.binixo.co"
2026/11/06 03:21:30 [error] 2789054#2789054: *7209783 access forbidden by rule, client: 35.241.167.186, server: binixo.co, request: "GET /laravel../.env HTTP/2.0", host: "www.binixo.co"
2026/11/06 03:21:30 [error] 2789053#2789053: *7209815 access forbidden by rule, client: 35.241.167.186, server: binixo.co, request: "GET /js../.env HTTP/2.0", host: "www.binixo.co"
...
show less
Web App Attack
🇧🇪
cmbplf
2026-11-06 03:17:47
UTC ·
(4 days ago)
8.333 requests from abuseipdb.com blacklisted IP (1w6d23h)
Brute-Force
Bad Web Bot
🇳🇱
Savvii
2026-11-06 03:06:40
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on lunar
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
dimitar Penkov
2026-11-06 02:29:09
UTC ·
(4 days ago)
DDOS flood attempts
Brute-Force
Exploited Host
🇬🇧
andypiper
2026-11-06 02:00:50
UTC ·
(4 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack