๐ซ๐ท
cityhunter_rhone
2026-05-06 10:24:36
(4 months ago)
Observed at (UTC): 2026-04-27T21:22:57+00:00 | Mercurius Guide auto detection | source=Fail2Ban | sc ...
show more
Observed at (UTC): 2026-04-27T21:22:57+00:00 | Mercurius Guide auto detection | source=Fail2Ban | scraper score=5 | events=1 | decision=datacenter | actions=fail2ban failed plesk-permanent-ban | last_seen=2026-04-27 21:22:57
show less
Brute-Force
SSH
Web App Attack
๐ซ๐ท
cityhunter_rhone
2026-05-04 21:07:19
(4 months ago)
Observed at (UTC): 2026-04-27T21:22:57+00:00 | Mercurius Guide auto detection | source=Fail2Ban | sc ...
show more
Observed at (UTC): 2026-04-27T21:22:57+00:00 | Mercurius Guide auto detection | source=Fail2Ban | scraper score=5 | events=1 | decision=datacenter | actions=fail2ban failed plesk-permanent-ban | last_seen=2026-04-27 21:22:57
show less
Brute-Force
SSH
Web App Attack
๐ซ๐ท
guillaume illien
2026-05-04 07:12:29
(4 months ago)
91.199.133.250 - - [04/May/2026:07:12:26 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windo ...
show more
91.199.133.250 - - [04/May/2026:07:12:26 +0000] "GET /.env HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:26 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:27 +0000] "GET /.env.development HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:27 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:28 +0000] "GET /.env.staging HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:28 +0000] "GET /.env.test HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [04/May/2026:07:12:29 +0000] "GET /.env.backup HTTP
...
show less
Hacking
Brute-Force
Web App Attack
SSH
๐ธ๐ช
donarev419
2026-05-03 04:25:06
(4 months ago)
Port scan detected on port 80 (connection without data transfer)
Port Scan
๐ฉ๐ช
Starburst SysOp Team
2026-05-02 19:55:05
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-1)
Hacking
Bad Web Bot
Anonymous
2026-05-02 19:28:58
(4 months ago)
B: f2b 404 5x
Web App Attack
๐ฉ๐ช
yvoictra
2026-05-02 19:24:48
(4 months ago)
91.199.133.250 - - [02/May/2026:21:24:10 +0200] "GET /.env HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windo ...
show more
91.199.133.250 - - [02/May/2026:21:24:10 +0200] "GET /.env HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:11 +0200] "GET /.env.local HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:11 +0200] "GET /.env.development HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:12 +0200] "GET /.env.production HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:13 +0200] "GET /.env.staging HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:13 +0200] "GET /.env.test HTTP/1.1" 404 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36"
91.199.133.250 - - [02/May/2026:21:24:13 +0200] "GET /.env.backup HTTP/1.1"
...
show less
Brute-Force
Web App Attack
Anonymous
2026-05-02 15:29:24
(4 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
Anonymous
2026-05-02 14:45:05
(4 months ago)
[Sat May 02 16:45:02.488860 2026] [authz_core:error] [pid 14841] [client 91.199.133.250:50995] AH016 ...
show more
[Sat May 02 16:45:02.488860 2026] [authz_core:error] [pid 14841] [client 91.199.133.250:50995] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 02 16:45:04.141122 2026] [authz_core:error] [pid 14843] [client 91.199.133.250:51161] AH01630: client denied by server configuration: /etc/httpd/htdocs
[Sat May 02 16:45:04.519243 2026] [authz_core:error] [pid 14836] [client 91.199.133.250:51239] AH01630: client denied by server configuration: /etc/httpd/htdocs
...
show less
Web App Attack
๐ฉ๐ช
Dennis
2026-05-02 14:05:42
(4 months ago)
91.199.133.250 has been banned for triggering http-sensitive-files (5 events over 3.26627462s).
Brute-Force
Web App Attack
๐ฉ๐ช
Richie
2026-05-02 13:58:46
(4 months ago)
[HOST1] Port Scan detected
Port Scan
๐บ๐ธ
Starburst SysOp Team
2026-05-02 10:56:30
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-7)
Hacking
Bad Web Bot
๐ฆ๐น
Starburst SysOp Team
2026-05-02 09:06:41
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-vie6-1)
Hacking
Bad Web Bot
๐ฉ๐ช
Starburst SysOp Team
2026-05-02 07:18:52
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-nue6-2)
Hacking
Bad Web Bot
Anonymous
2026-05-02 06:45:56
(4 months ago)
T: f2b 404 5x
Web App Attack