|
๐ฉ๐ช
jbcrn
|
|
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537. ...
show more
Blocked by iocaine (nam-shub-of-enki) tarpit. Classified as: Disguised bots, ruleset: faked-browser. Requested honeypot path: /. User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: ZA, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
|
Bad Web Bot
Web App Attack
|
|
๐ฎ๐ณ
evicky2002
|
|
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
|
Hacking
Brute-Force
SSH
|
|
๐ณ๐ฑ
homeshowdomain.nl
|
|
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17.
|
Web App Attack
SSH
Hacking
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
๐ฉ๐ช
hmt
|
|
34.35.198.25 - - [18/Sep/2026:22:30:26 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="notes.hmt.ovh"
34.35.198.25 - - [18/Se ...
show more
34.35.198.25 - - [18/Sep/2026:22:30:26 +0200] "GET /.git/config HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="notes.hmt.ovh"
34.35.198.25 - - [18/Sep/2026:22:30:26 +0200] "GET /.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="notes.hmt.ovh"
34.35.198.25 - - [18/Sep/2026:22:30:27 +0200] "GET /.env.local HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="notes.hmt.ovh"
34.35.198.25 - - [18/Sep/2026:22:30:27 +0200] "GET /.env.production HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" host="notes.hmt.ovh"
34.35.198.25 - - [18/Sep/2026:22:30:27 +0200] "GET /.env.staging HTTP/1.1" 404 181 "-" "Mozilla/
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
infra-monitor
|
|
Automated ban via infra-monitor: suspicious-probe
|
Port Scan
|
|
๐บ๐ธ
SLSLLC
|
|
34.35.198.25 - - [18/Sep/2026:17:48:58 +0000] "GET /.env HTTP/2.0" 404 395 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
|
Brute-Force
Web App Attack
|
|
๐ท๐ด
iulianh
|
|
80,443
|
Brute-Force
SSH
|
|
๐ณ๐ฑ
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.198.25 - - [18/Sep/2026:15:44:08 +0200] "GET /.git/config HTTP/1.1" 301 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537. ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.35.198.25 - - [18/Sep/2026:15:44:08 +0200] "GET /.git/config HTTP/1.1" 301 524 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Alt255
|
|
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.35.198.25 - - \[18/Sep/2026:12:58:23 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.35.198.25 - - \[18/Sep/2026:12:58:23 +0200\] "GET /.git/config HTTP/1.1" 404 2156 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
wteiken
|
|
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:04:59 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 ...
show more
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:04:59 -0400] "GET /.git/config HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:04:59 -0400] "GET /.env HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:04:59 -0400] "GET /.env.local HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:04:59 -0400] "GET /.env.production HTTP/1.1" 404 564 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
www.teiken.net:443 34.35.198.25:39628 - - [18/Sep/2026:06:05:00 -0400] "GET /.en
...
show less
|
Web App Attack
|
|
๐ฉ๐ช
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
|
Exploited Host
Web App Attack
|
|
๐ซ๐ท
masterguru
|
|
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
|
Hacking
Web App Attack
|
|
๐ฉ๐ช
diosama
|
|
CrowdSec blocked: crowdsecurity/appsec-vpatch
|
Brute-Force
Web App Attack
|