🇳🇱
erwindecker
2026-11-15 21:53:29
UTC ·
(46 minutes ago)
[15/Nov/2026:22:53:26 +0100] - 404 404 - GET https homarr.erriedh.duckdns.org "/.git/config" [Client 43.133.116.178] [Length 1815] [Gzip -] [Sent-to 10.0.0.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1 ...
show more
[15/Nov/2026:22:53:26 +0100] - 404 404 - GET https homarr.erriedh.duckdns.org "/.git/config" [Client 43.133.116.178] [Length 1815] [Gzip -] [Sent-to 10.0.0.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[15/Nov/2026:22:53:27 +0100] - 404 404 - GET https homarr.erriedh.duckdns.org "/.env" [Client 43.133.116.178] [Length 5736] [Gzip -] [Sent-to 10.0.0.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[15/Nov/2026:22:53:27 +0100] - 404 404 - GET https homarr.erriedh.duckdns.org "/.env.local" [Client 43.133.116.178] [Length 5739] [Gzip -] [Sent-to 10.0.0.41] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[15/Nov/2026:22:53:28 +0100] - 404 404 - GET https homarr.erriedh.duckdns.org "/.env.production" [Client 43.133.116.178] [Length 5744] [Gzip -] [Sent-to 10.0.0.41] "Mozilla/5
...
show less
Port Scan
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-15 00:35:01
UTC ·
(22 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇦
jacqueskruger
2026-11-14 02:26:43
UTC ·
(1 day ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-14T02:14:33Z. Evidence: repeated distinct requests matchin ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 2 triggering events. Detections: high-confidence-scanner. Latest evidence UTC: 2026-11-14T02:14:33Z. Evidence: repeated distinct requests matching our high-confidence scanner rules.
show less
Bad Web Bot
🇳🇱
Alt255
2026-11-13 05:09:40
UTC ·
(2 days ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.133.116.178 - - [13/Nov/2026:06:09:23 +0100] "GET /.git/config HTTP/1.1" 301 645 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.133.116.178 - - [13/Nov/2026:06:09:23 +0100] "GET /.git/config HTTP/1.1" 301 645 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-10 18:42:57
UTC ·
(5 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.133.116.178 - - [10/Nov/2026:19:42:49 +0100] "GET /.git/config HTTP/1.1" 301 528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/53 ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 43.133.116.178 - - [10/Nov/2026:19:42:49 +0100] "GET /.git/config HTTP/1.1" 301 528 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-10 11:37:38
UTC ·
(5 days ago)
479 requests with url.path *.env
Brute-Force
Bad Web Bot
🇸🇬
simpeg-adm.bandung.go.id
2026-11-10 04:53:04
UTC ·
(5 days ago)
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.git/config"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.env"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.env.local"
10/Nov/2026:04:53:03 +0000;43.133.116.178 ...
show more
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.git/config"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.env"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.env.local"
10/Nov/2026:04:53:03 +0000;43.133.116.178;"/.env.production"
10/Nov/2026:04:53:04 +0000;43.133.116.178;"/.env.staging"
10/Nov/2026:04:53:04 +0000;43.133.116.178;"/.env.development"
...
show less
Web Spam
Brute-Force
Web App Attack
🇩🇪
pscriptos
2026-11-09 19:34:10
UTC ·
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
alecj.com
2026-11-09 17:08:06
UTC ·
(6 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇩🇪
big-cloud.nl
2026-11-09 13:50:16
UTC ·
(6 days ago)
Try to access /.git/config
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 10:03:56
UTC ·
(6 days ago)
cloudlinux2 fail2ban: 2026-11-09 10:59:45,185 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Ban 43.133.116.178cloudlinux2 fail2ban: 2026-11-09 10:59:45,187 fail2ban.filter [1667]: INFO [recidive] Found 43.133.116.178 - 2026-1 ...
show more
cloudlinux2 fail2ban: 2026-11-09 10:59:45,185 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Ban 43.133.116.178cloudlinux2 fail2ban: 2026-11-09 10:59:45,187 fail2ban.filter [1667]: INFO [recidive] Found 43.133.116.178 - 2026-11-09 10:59:45cloudlinux2 fail2ban: 2026-11-09 10:59:44,593 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 43.133.116.178 - 2026-11-09 10:59:44cloudlinux2 fail2ban: 2026-11-09 10:59:45,033 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 43.133.116.178 - 2026-11-09 10:59:45cloudlinux2 fail2ban: 2026-11-09 10:59:44,808 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 43.133.116.178 - 2026-11-09 10:59:44cloudlinux2 fail2ban: 2026-11-09 10:59:44,367 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 43.133.116.178 - 2026-11-09 10:59:44cloudlinux2 fail2ban: 2026-11-09 11:00:13,229 fail2ban.actions [1667]: NOTICE [plesk-modsecurity] Unban 34.14.19.26cloudlinux2 fail2ban: 2026-11-09 11:00:35,060
show less
Brute-Force
🇩🇪
Mr-Money
2026-11-09 09:07:00
UTC ·
(6 days ago)
scenario: crowdsecurity/http-sensitive-files - events: 5
Web App Attack
Hacking
🇳🇱
Site.eu
2026-11-08 10:54:35
UTC ·
(1 week ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-07 23:00:38
UTC ·
(1 week ago)
Auto-ban: >3000 req/min op 2026-11-07
Web App Attack
SSH
Hacking
🇧🇪
taivas.nl
2026-11-07 05:33:51
UTC ·
(1 week ago)
Many_bad_calls
Web App Attack