🇱🇻
radix
2026-11-10 00:09:25
UTC ·
(19 hours ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-11-09 23:03:57
UTC ·
(20 hours ago)
cloudlinux2 fail2ban: 2026-11-09 23:58:47,501 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 74.249.4.10 - 2026-11-09 23:58:47cloudlinux2 fail2ban: 2026-11-10 00:01:39,086 fail2ban.actions [1667]: NOTICE [recidive] Unban 34 ...
show more
cloudlinux2 fail2ban: 2026-11-09 23:58:47,501 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 74.249.4.10 - 2026-11-09 23:58:47cloudlinux2 fail2ban: 2026-11-10 00:01:39,086 fail2ban.actions [1667]: NOTICE [recidive] Unban 34.128.110.12cloudlinux2 fail2ban: 2026-11-10 00:02:32,841 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 45.146.55.243 - 2026-11-10 00:02:31cloudlinux2 fail2ban: 2026-11-10 00:02:52,875 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 193.56.116.109 - 2026-11-10 00:02:52cloudlinux2 fail2ban: 2026-11-10 00:03:01,055 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 2.90.116.249 - 2026-11-10 00:03:00cloudlinux2 fail2ban: 2026-11-10 00:03:00,328 fail2ban.filter [1667]: INFO [plesk-modsecurity] Found 38.253.149.46 - 2026-11-10 00:03:00cloudlinux2 fail2ban: 2026-11-10 00:03:04,354 fail2ban.filter [1667]: INFO [plesk-wordpress] Found 45.131.193.180 - 2026-11-10 00:03:02cloudlinux2 fail2ban: 2026-11-10 00
show less
Web App Attack
🇨🇭
SOC [GOLINE SA]
2026-11-09 23:00:18
UTC ·
(20 hours ago)
FortiGate IPS: AndroxGh0st.Malware (severity high)
Hacking
🇳🇱
homeshowdomain.nl
2026-11-09 22:59:12
UTC ·
(20 hours ago)
Auto-ban: >3000 req/min op 2026-11-09
Web App Attack
SSH
Hacking
Anonymous
2026-11-09 22:52:05
UTC ·
(20 hours ago)
Bot / scanning and/or hacking attempts: POST / HTTP/1.1, GET /.env HTTP/1.1
Hacking
Web App Attack
🇳🇱
debestelapp
2026-11-09 22:22:58
UTC ·
(21 hours ago)
Web App Attack
🇳🇦
jacqueskruger
2026-11-09 21:18:45
UTC ·
(22 hours ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 1 triggering events. Detections: crowdsecurity/vpatch-laravel-debug-mode. Latest evidence UTC: 2026-11-09T21:05:57Z. Evidence: inline WAF rejecti ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 1 triggering events. Detections: crowdsecurity/vpatch-laravel-debug-mode. Latest evidence UTC: 2026-11-09T21:05:57Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
🇺🇸
leasj
2026-11-09 20:45:51
UTC ·
(22 hours ago)
Observed Scanned 1 known-sensitive endpoint(s), e.g.: /.env.
Hacking
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-11-09 20:27:23
UTC ·
(22 hours ago)
[redacted] 74.249.4.10 - - [09/Nov/2026:20:51:14 +0100] "GET /.env HTTP/1.1" 302 6756 0/235970 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 ...
show more
[redacted] 74.249.4.10 - - [09/Nov/2026:20:51:14 +0100] "GET /.env HTTP/1.1" 302 6756 0/235970 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 443 [redacted] 74.249.4.10 - - [09/Nov/2026:21:27:18 +0100] "GET /.env HTTP/1.1" 302 6776 0/327769 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 443
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-09 19:32:26
UTC ·
(23 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-09 18:46:54
UTC ·
(1 day ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇩🇪
shurizma
2026-11-09 18:45:49
UTC ·
(1 day ago)
[09/Nov/2026:18:45:48 +0000] - - 301 - GET http shuri.gg "/.env" [Client 74.249.4.10] [Length 166] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 ...
show more
[09/Nov/2026:18:45:48 +0000] - - 301 - GET http shuri.gg "/.env" [Client 74.249.4.10] [Length 166] [Gzip -] [Sent-to 127.0.0.1] "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" "-"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
PlexLads
2026-11-09 18:08:43
UTC ·
(1 day ago)
74.249.4.10 - - [09/Nov/2026:10:08:41 -0800] "GET /.env HTTP/1.1" 301 479 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30 ...
show more
74.249.4.10 - - [09/Nov/2026:10:08:41 -0800] "GET /.env HTTP/1.1" 301 479 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30" 74.249.4.10 - - [09/Nov/2026:10:08:41 -0800] "GET /.env HTTP/1.1" 307 4720 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
show less
Hacking
Web App Attack
🇺🇸
mnsf
2026-11-09 18:05:15
UTC ·
(1 day ago)
Abuse Detected (12)
Brute-Force
Web App Attack
Anonymous
2026-11-09 18:01:03
UTC ·
(1 day ago)
74.249.4.10 patrz.eu - [09/Nov/2026:19:01:02 +0100] "GET /.env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/5 ...
show more
74.249.4.10 patrz.eu - [09/Nov/2026:19:01:02 +0100] "GET /.env HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30"
...
show less
Hacking
Web App Attack