๐ฉ๐ช
Melle
2026-07-27 17:27:04
(2 hours ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 64.176.213.13 triggered 5 event ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 64.176.213.13 triggered 5 events | Detected: 2026-07-27T17:27:03.541780183Z
show less
Web App Attack
Hacking
Anonymous
2026-07-27 17:04:55
(2 hours ago)
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.env.example HTTP/1.1" 444 0 "-" "Mozilla/5.0 ( ...
show more
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.env.example HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-"
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" "-"
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.env.staging HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:126.0) Gecko/20100101 Firefox/126.0" "-"
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.env HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Mobile Safari/537.36" "-"
64.176.213.13 - - [27/Jul/2026:17:04:55 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/12
...
show less
Port Scan
Brute-Force
๐ฉ๐ช
Lino Project
2026-07-27 16:41:49
(2 hours ago)
CrowdSec abuse IP report (host SRV-2) Scenario: crowdsecurity/http-sensitive-files
Hacking
๐บ๐ธ
masterguru
2026-07-27 16:37:08
(3 hours ago)
. Matched phrase "/.env" at REQUEST_URI. (210492-128)
Web App Attack
Anonymous
2026-07-27 16:29:06
(3 hours ago)
$f2bV_matches
Brute-Force
Web App Attack
Anonymous
2026-07-27 16:05:05
(3 hours ago)
Web application exploitation attempts blocked at the web server edge
Web App Attack
๐ฉ๐ช
jotoma.de
2026-07-27 14:19:58
(5 hours ago)
[Mon Jul 27 16:19:57.543587 2026] [proxy_fcgi:error] [pid 1830993:tid 1831039] [client 64.176.213.13 ...
show more
[Mon Jul 27 16:19:57.543587 2026] [proxy_fcgi:error] [pid 1830993:tid 1831039] [client 64.176.213.13:35220] AH01071: Got error 'Primary script unknown'
[Mon Jul 27 16:19:57.640457 2026] [proxy_fcgi:error] [pid 1830993:tid 1831042] [client 64.176.213.13:35328] AH01071: Got error 'Primary script unknown'
[Mon Jul 27 16:19:57.732673 2026] [proxy_fcgi:error] [pid 1830994:tid 1831083] [client 64.176.213.13:35406] AH01071: Got error 'Primary script unknown'
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
paissangroup
2026-07-27 14:04:42
(5 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-07-27 13:32:31
(6 hours ago)
fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [uri "/.envrc ...
show more
fail2ban_an apache-modsecurity [msg "Inbound Anomaly Score Exceeded (Total Score: 8)"] [uri "/.envrc"]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-07-27 12:43:08
(6 hours ago)
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.backup HTTP/1.1" 404 15257 "-" "Mozilla/5. ...
show more
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.backup HTTP/1.1" 404 15257 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36" "-"
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.bkp HTTP/1.1" 404 15251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36 Edg/125.0.0.0" "-"
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.old HTTP/1.1" 404 15251 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Safari/605.1.15" "-"
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.live HTTP/1.1" 404 15253 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:124.0) Gecko/20100101 Firefox/124.0" "-"
64.176.213.13 - - [27/Jul/2026:12:43:08 +0000] "GET /.env.production.local HTTP/1.1" 404 15277 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Saf
...
show less
Port Scan
Brute-Force
๐ฉ๐ช
todix
2026-07-27 12:14:38
(7 hours ago)
WebAttack or semilar from 64.176.213.13
Web App Attack
๐ซ๐ท
Octavio
2026-07-27 09:43:45
(9 hours ago)
(CT) IP 64.176.213.13 (US/United States/64.176.213.13.vultrusercontent.com) found to have 48 connect ...
show more
(CT) IP 64.176.213.13 (US/United States/64.176.213.13.vultrusercontent.com) found to have 48 connections; Ports: *; Direction: inout; Trigger: CT_LIMIT
show less
Port Scan
Brute-Force
SSH