๐ณ๐ฑ
Alt255
2026-10-25 13:13:00
(6 hours ago)
[ti-12al] Web exploit scanning: 68 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[ti-12al] Web exploit scanning: 68 suspicious requests detected by fail2ban jail <name>. Example: 34.38.113.44 - - \[19/Oct/2026:22:18:17 +0200\] "GET /.env HTTP/2.0" 301 454 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.38.113.44 - - \[19/Oct/2026:22:18:17 +0200\] "GET /core/.env HTTP/2.0" 301 396 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.38.113.44 - - \[19/Oct/2026:22:18:17 +0200\] "GET /api/.env HTTP/2.0" 301 394 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.38.113.44 - - \[19/Oct/2026:22:18:17 +0200\] "GET /.git/config HTTP/2.0" 301 399 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.38.113.44 - - \[19/Oct/2026:22:18:17 +0200\] "GET /backend/.env HTTP/
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฑ
Fernando Soto
2026-10-25 03:05:15
(16 hours ago)
WAF propio vps1 (CL): 404x78,sensx73 score 22 en 1h. sondeo rutas sensibles, barrido 404.
Port Scan
Web App Attack
๐ฌ๐ง
sc user
2026-10-25 01:21:20
(17 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Anonymous
2026-10-24 23:30:25
(19 hours ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ช๐ธ
Yoeph
2026-10-24 23:21:45
(19 hours ago)
Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControl ...
show more
Attacking server service nginx-movimientos-forbidden (Permanently Banned by Fail2ban on TurnoControlPro VPS)
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
TheCoon
2026-10-24 16:29:15
(1 day ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ฆ๐บ
CalmBrain
2026-10-24 16:00:21
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
Anonymous
2026-10-24 14:05:47
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-24 14:04:47
(1 day ago)
fail2ban jail apache-secrets-probe: 34.38.113.44 - - [17/Sep/2026:02:46:26 -0700] "GET /.git/config ...
show more
fail2ban jail apache-secrets-probe: 34.38.113.44 - - [17/Sep/2026:02:46:26 -0700] "GET /.git/config HTTP/1.1" 403 3081 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
๐ฉ๐ช
33three
2026-10-24 14:04:03
(1 day ago)
Fail2Ban jail WebAttack triggered
Brute-Force
๐ฉ๐ช
maxpower
2026-10-24 13:00:43
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.38.113.44 (BE/Belgium/44.113.38.34.bc ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.38.113.44 (BE/Belgium/44.113.38.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.38.113.44 - - [24/Oct/2026:15:00:38 +0200] "GET /.aws/credentials.bak HTTP/2.0" 429 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "34.38.113.44" host=villapardi.it
show less
Port Scan
๐ฉ๐ช
Viveronese
2026-10-24 13:00:07
(1 day ago)
HTTP vulnerability scanning
Web App Attack
Anonymous
2026-10-24 12:35:08
(1 day ago)
[honeypot-scan] 2026-10-24 12:35:08, Client: 34.38.113.44, Protocol: 6 (TCP), Service: HTTP, Activit ...
show more
[honeypot-scan] 2026-10-24 12:35:08, Client: 34.38.113.44, Protocol: 6 (TCP), Service: HTTP, Activity: bait-path scan (.env/.git probing)
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-24 12:33:36
(1 day ago)
[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-16al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.38.113.44 - - [24/Oct/2026:14:33:20 +0200] "GET /.env-example HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [24/Oct/2026:14:33:20 +0200] "GET /.docker/config.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [24/Oct/2026:14:33:20 +0200] "GET /.aws/credentials.bak HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [24/Oct/2026:14:33:20 +0200] "GET /.aws/credentials HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [24/Oct/2026:14:33:20 +0200] "GET /.cursor/mcp.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.38.113.44 - - [24/O
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-24 12:31:00
(1 day ago)
Multiple WAF Violations
Web App Attack