๐ฌ๐ง
sc user
2026-10-10 11:38:00
(3 weeks ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
๐ฌ๐ง
sc user
2026-10-08 23:55:41
(3 weeks ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
Bad Web Bot
Web App Attack
Port Scan
Anonymous
2026-10-08 14:48:16
(3 weeks ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ช๐ธ
robotstxt
2026-10-08 14:45:30
(3 weeks ago)
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000] "GET /build/manifest.json HTTP/2.0" 403 20726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="136.67.242.132"
136.67.242.1 ...
show more
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000] "GET /build/manifest.json HTTP/2.0" 403 20726 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="136.67.242.132"
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000] "GET /dist/manifest.json HTTP/2.0" 403 20723 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="136.67.242.132"
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 20725 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="136.67.242.132"
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000] "GET /z9x8c7v6b5-debug-trigger-librerias.paulinas.es HTTP/2.0" 403 21597 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "-" edge="136.67.242.132"
136.67.242.132 - - [08/Oct/2026:14:45:12 +0000]
...
show less
Web App Attack
๐จ๐ฟ
ptlab
2026-10-08 13:25:19
(3 weeks ago)
Web attack probes: 99 suspicious URL paths (94 known-malicious), 102 requests; 8 successful (2xx) requests to attack paths; types: admin-panel, cgi, lfi, rce, sensitive-files, traversal, wordpress; last seen 2026-10-08 (UTC). Reported automatically b ...
show more
Web attack probes: 99 suspicious URL paths (94 known-malicious), 102 requests; 8 successful (2xx) requests to attack paths; types: admin-panel, cgi, lfi, rce, sensitive-files, traversal, wordpress; last seen 2026-10-08 (UTC). Reported automatically by PathDB log analysis.
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
EvilTurkey
2026-10-08 12:25:42
(3 weeks ago)
Web app attack against financial institution website.
Web App Attack
Hacking
๐ง๐ช
voormedia
2026-10-08 12:22:51
(3 weeks ago)
Accessed trap at '/.npmrc'
Web App Attack
Anonymous
2026-10-08 09:50:16
(3 weeks ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ฏ๐ต
Short-legs-Spider
2026-10-08 09:34:55
(3 weeks ago)
Test on existence
--
[08/Oct/2026:18:34:55 +0900] "GET / HTTP/2.0" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[08/Oct/2026:18:34:55 +0900] "GET /.ssh/id_rsa HT ...
show more
Test on existence
--
[08/Oct/2026:18:34:55 +0900] "GET / HTTP/2.0" 403 76 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
[08/Oct/2026:18:34:55 +0900] "GET /.ssh/id_rsa HTTP/2.0" 403 76 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
[08/Oct/2026:18:34:55 +0900] "GET /gciy9w6ujjjj7tgg0nel HTTP/2.0" 404 672 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
[08/Oct/2026:18:34:55 +0900] "GET /public/plugins/text/../../../../../../../../proc/self/environ HTTP/2.0" 400 226 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
[08/Oct/2026:18:34:55 +0900] "GET /z9x8c7v6b5-debug-trigger-==.jp HTTP/2.0" 403 76 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
[08/Oct/2026:18:34:55 +0900] "GET /ztx60uuijgnuu7m073fe HTTP/2.0" 403 76 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
๐น๐ผ
kk_it_man
2026-10-08 08:16:02
(3 weeks ago)
hack
Hacking
๐ง๐พ
lns.bz
2026-10-08 01:30:26
(3 weeks ago)
.env scanning [BY]
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-08 01:04:11
(3 weeks ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.67.242.132 - - [08/Oct/2026:03:04:06 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 1879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.67.242.132 - - [08/Oct/2026:03:04:06 +0200] "GET /.ssh/id_ed25519 HTTP/2.0" 404 1879 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
backslash
2026-10-08 00:42:00
(3 weeks ago)
block ruleset WAF detection and high score on abuseIPDB 149EB1B42C242111FADBBC2EF8F90219570691E1
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-08 00:40:12
(3 weeks ago)
[ti-01sc] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.67.242.132 - - [08/Oct/2026:02:40:08 +0200] "GET /signup HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleW ...
show more
[ti-01sc] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 136.67.242.132 - - [08/Oct/2026:02:40:08 +0200] "GET /signup HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.67.242.132 - - [08/Oct/2026:02:40:08 +0200] "GET /auth HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.67.242.132 - - [08/Oct/2026:02:40:08 +0200] "GET /user/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
136.67.242.132 - - [08/Oct/2026:02:40:08 +0200] "GET /users/login HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (W
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
ipblock.com
2026-10-07 23:54:00
(3 weeks ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack