🇮🇹
4.232.144.219
25 Sep 2026
{"transaction":{"timestamp":"2026/09/25 23:19:07","unix_timestamp":1790378347844744868,"id":"wbELzVL ...
show more
{"transaction":{"timestamp":"2026/09/25 23:19:07","unix_timestamp":1790378347844744868,"id":"wbELzVLhOmCQedOg","client_ip":"172.16.16.3","client_port":0,"host_ip":"","host_port":0,"server_id":"demo2.timvdberg.dev","request":{"method":"GET","protocol":"HTTP/1.1","uri":"/.well-known/xhornoeu.php","http_version":"","headers":{"accept-encoding":["gzip, br"],"cdn-loop":["cloudflare; loops=1"],"cf-connecting-ip":["4.232.144.219"],"cf-ipcountry":["IT"],"cf-ray":["a40dc0811b86edaf-MXP"],"cf-visitor":["{\"scheme\":\"https\"}"],"host":["demo2.timvdberg.dev"],"x-forwarded-for":["4.232.144.219, 172.70.216.98"],"x-forwarded-host":["demo2.timvdberg.dev"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-forwarded-server":["6780ba6a55bc"],"x-real-ip":["172.70.216.98"]},"body":"","files":null,"args":{},"length":0},"response":{"protocol":"","status":404,"headers":{"content-type":["text/html; charset=UTF-8"],"date":["Fri, 25 Sep 2026 23:19:07 GMT"],"server":["nginx"],"via":["1.1 Caddy"]},"body
...
show less
Hacking
Web App Attack
🇵🇱
45.138.12.22
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 45.138.12.22. Evidence: 1 m ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 45.138.12.22. Evidence: 1 matching request(s).
UTC: 2026-09-25 22:06:26.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (1x)
show less
Web App Attack
🇵🇱
45.138.12.25
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 45.138.12.25. Evidence: 3 m ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 45.138.12.25. Evidence: 3 matching request(s).
UTC: 2026-09-25 21:06:40 to 2026-09-25 21:06:40.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (1x)
GET /.docker/laravel/app/.env -> HTTP 403 (1x)
GET /.docker/.env -> HTTP 403 (1x)
show less
Web App Attack
🇧🇪
34.156.121.46
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.121.46. Evidence: 1 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.121.46. Evidence: 1 matching request(s).
UTC: 2026-09-25 21:02:50.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (1x)
show less
Web App Attack
🇧🇪
34.14.99.143
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.14.99.143. Evidence: 4 m ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.14.99.143. Evidence: 4 matching request(s).
UTC: 2026-09-25 20:38:14 to 2026-09-25 20:38:14.
Observed requests (query strings omitted):
GET /.docker/.env -> HTTP 403 (1x)
GET /.docker/laravel/app/.env -> HTTP 403 (1x)
GET /.aws/.env -> HTTP 403 (1x)
GET /.env -> HTTP 429 (1x)
show less
Web App Attack
🇮🇩
34.101.124.123
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.101.124.123. Evidence: 4 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.101.124.123. Evidence: 4 matching request(s).
UTC: 2026-09-25 20:23:47 to 2026-09-25 20:23:48.
Observed requests (query strings omitted):
GET /.git/config -> HTTP 403 (2x)
GET /.env -> HTTP 403 (1x)
GET /.env -> HTTP 429 (1x)
show less
Web App Attack
🇳🇱
45.148.10.32
25 Sep 2026
CrowdSec detected crowdsecurity/http-probing on a monitored service.
Web App Attack
🇺🇸
34.56.1.108
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇭🇰
20.205.12.169
25 Sep 2026
CrowdSec detected crowdsecurity/http-probing on a monitored service.
Web App Attack
🇨🇭
93.152.209.10
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 93.152.209.10. Evidence: 3 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 93.152.209.10. Evidence: 3 matching request(s).
UTC: 2026-09-25 16:09:18 to 2026-09-25 16:09:18.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (2x)
GET /.git/HEAD -> HTTP 403 (1x)
show less
Web App Attack
🇧🇪
35.240.100.200
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇸🇬
161.118.223.66
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇸🇬
161.118.208.28
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇮🇳
74.225.148.80
25 Sep 2026
CrowdSec detected crowdsecurity/http-probing on a monitored service.
Web App Attack
🇵🇱
45.138.12.51
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇫🇮
142.250.33.40
25 Sep 2026
{"transaction":{"timestamp":"2026/09/25 07:25:57","unix_timestamp":1790321157735411153,"id":"dyZilRj ...
show more
{"transaction":{"timestamp":"2026/09/25 07:25:57","unix_timestamp":1790321157735411153,"id":"dyZilRjsjauJZiYH","client_ip":"172.16.16.3","client_port":0,"host_ip":"","host_port":0,"server_id":"www.timvdberg.dev","request":{"method":"GET","protocol":"HTTP/1.1","uri":"/.well-known/assetlinks.json","http_version":"","headers":{"accept":["*/*"],"accept-encoding":["gzip, br"],"cdn-loop":["cloudflare; loops=1"],"cf-connecting-ip":["142.250.33.40"],"cf-ipcountry":["FI"],"cf-ray":["a4084c42f8a17dde-ARN"],"cf-visitor":["{\"scheme\":\"https\"}"],"host":["www.timvdberg.dev"],"user-agent":["GoogleAssociationService"],"x-forwarded-for":["142.250.33.40, 104.23.221.125"],"x-forwarded-host":["www.timvdberg.dev"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-forwarded-server":["6780ba6a55bc"],"x-real-ip":["104.23.221.125"]},"body":"","files":null,"args":{},"length":0},"response":{"protocol":"","status":404,"headers":{"content-length":["146"],"content-type":["text/html"],"date":["Fri, 25 S
...
show less
Hacking
Web App Attack
🇧🇪
66.249.93.201
25 Sep 2026
{"transaction":{"timestamp":"2026/09/25 07:25:44","unix_timestamp":1790321144416578866,"id":"hckxoQE ...
show more
{"transaction":{"timestamp":"2026/09/25 07:25:44","unix_timestamp":1790321144416578866,"id":"hckxoQENVcPmfWfc","client_ip":"172.16.16.3","client_port":0,"host_ip":"","host_port":0,"server_id":"www.timvdberg.dev","request":{"method":"GET","protocol":"HTTP/1.1","uri":"/.well-known/assetlinks.json","http_version":"","headers":{"accept":["*/*"],"accept-encoding":["gzip, br"],"cdn-loop":["cloudflare; loops=1"],"cf-connecting-ip":["66.249.93.201"],"cf-ipcountry":["BE"],"cf-ray":["a4084befdb63d784-CDG"],"cf-visitor":["{\"scheme\":\"https\"}"],"host":["www.timvdberg.dev"],"user-agent":["GoogleAssociationService"],"x-forwarded-for":["66.249.93.201, 172.71.126.139"],"x-forwarded-host":["www.timvdberg.dev"],"x-forwarded-port":["443"],"x-forwarded-proto":["https"],"x-forwarded-server":["6780ba6a55bc"],"x-real-ip":["172.71.126.139"]},"body":"","files":null,"args":{},"length":0},"response":{"protocol":"","status":404,"headers":{"content-length":["146"],"content-type":["text/html"],"date":["Fri, 25 S
...
show less
Hacking
Web App Attack
🇧🇪
35.240.100.200
25 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 35.240.100.200. Evidence: 2 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 35.240.100.200. Evidence: 2 matching request(s).
UTC: 2026-09-25 05:30:25 to 2026-09-25 05:30:25.
Observed requests (query strings omitted):
GET /.docker/.env -> HTTP 403 (1x)
GET /.env -> HTTP 403 (1x)
show less
Web App Attack
🇨🇦
34.152.10.163
25 Sep 2026
CrowdSec detected crowdsecurity/http-probing on a monitored service.
Web App Attack
🇨🇦
34.152.16.111
25 Sep 2026
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
🇨🇭
93.152.209.10
24 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 93.152.209.10. Evidence: 4 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 93.152.209.10. Evidence: 4 matching request(s).
UTC: 2026-09-24 20:04:05 to 2026-09-24 20:04:05.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (2x)
GET /.git/HEAD -> HTTP 403 (2x)
show less
Web App Attack
🇧🇪
34.156.121.46
24 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.121.46. Evidence: 2 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.121.46. Evidence: 2 matching request(s).
UTC: 2026-09-24 19:36:51 to 2026-09-24 19:36:51.
Observed requests (query strings omitted):
GET /.env -> HTTP 403 (1x)
GET /.docker/.env -> HTTP 429 (1x)
show less
Web App Attack
🇧🇪
35.205.254.119
24 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 35.205.254.119. Evidence: 3 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 35.205.254.119. Evidence: 3 matching request(s).
UTC: 2026-09-24 19:30:17 to 2026-09-24 19:30:17.
Observed requests (query strings omitted):
GET /.docker/laravel/app/.env -> HTTP 403 (1x)
GET /.env -> HTTP 403 (1x)
GET /.docker/.env -> HTTP 429 (1x)
show less
Web App Attack
🇧🇪
34.156.206.32
24 Sep 2026
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.206.32. Evidence: 2 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.156.206.32. Evidence: 2 matching request(s).
UTC: 2026-09-24 18:36:33 to 2026-09-24 18:36:33.
Observed requests (query strings omitted):
GET /.docker/.env -> HTTP 403 (1x)
GET /.docker/laravel/app/.env -> HTTP 403 (1x)
show less
Web App Attack
🇨🇦
34.152.10.163
24 Sep 2026
CrowdSec detected crowdsecurity/http-path-traversal-probing on a monitored service.
Web App Attack