Anonymous
2026-10-26 22:32:07
(1 hour ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
π³π±
Alt255
2026-10-26 21:10:32
(2 hours ago)
[ti-14al] Excessive 404 errors (web scanning): 104 suspicious requests detected by fail2ban jail <na ...
show more
[ti-14al] Excessive 404 errors (web scanning): 104 suspicious requests detected by fail2ban jail <name>. Example: 34.62.25.61 - - [24/Oct/2026:00:40:52 +0200] "GET /.amplifyrc HTTP/1.1" 404 484 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:00:40:52 +0200] "GET /.aws/.env HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:00:40:52 +0200] "GET /.env.anthropic HTTP/1.1" 404 469 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:00:40:52 +0200] "GET /.aws/credentials HTTP/1.1" 404 332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:00:40:52 +0200] "GET /.claude/set
...
show less
Bad Web Bot
Web App Attack
π©πͺ
ecs.ge
2026-10-26 08:45:42
(14 hours ago)
Automatic Fail2Ban report from jail plesk-apache: multiple matching events detected.
Brute-Force
π§πͺ
Ivo Vynckier
2026-10-25 15:36:00
(1 day ago)
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.aws/.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Win ...
show more
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.aws/.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.env.anthropic HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.docker/.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.env-sample HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.62.25.61 - - [24/Oct/2026:13:32:15 +0200] "GET /.docker/laravel/app/.env HTTP/2.0" 403 106 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
π³π±
Alt255
2026-10-25 13:34:34
(1 day ago)
[ftpbd] Web exploit scanning: 72 suspicious requests detected by fail2ban jail <name>. Example: 34.6 ...
show more
[ftpbd] Web exploit scanning: 72 suspicious requests detected by fail2ban jail <name>. Example: 34.62.25.61 - - \[19/Oct/2026:04:58:21 +0200\] "GET /.aws/config HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.62.25.61 - - \[19/Oct/2026:04:58:21 +0200\] "GET /.aws/.env HTTP/1.1" 404 2238 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.62.25.61 - - \[19/Oct/2026:04:58:21 +0200\] "GET /.docker/.env HTTP/1.1" 404 2238 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.62.25.61 - - \[19/Oct/2026:04:58:21 +0200\] "GET /.env.anthropic HTTP/1.1" 404 2238 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36"
34.62.25.61 - - \[19/Oct/2026:04:58:21 +0200\] "GET /.aws/credential
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 10:22:07
(1 day ago)
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web s ...
show more
Fail2Ban: request for a known-malicious path (.env, .git, wp-login, actuator, ...) on a public web server; honeypot hit, banned on first attempt.
show less
Web App Attack
Bad Web Bot
πͺπΈ
librebit
2026-10-25 06:40:01
(1 day ago)
Brute force
Brute-Force
π©πͺ
IVski.com
2026-10-25 00:42:20
(1 day ago)
IVski WAF | Webshell probe detected - requesting common script extensions
Hacking
Brute-Force
Web App Attack
π«π·
tecnicorioja
2026-10-24 22:01:25
(2 days ago)
(Mod_security)
Web App Attack
Brute-Force
Bad Web Bot
Anonymous
2026-10-24 14:05:21
(2 days ago)
fail2ban jail apache-secrets-probe: 34.62.25.61 - - [04/Oct/2026:21:22:02 -0700] "GET /admin/.env HT ...
show more
fail2ban jail apache-secrets-probe: 34.62.25.61 - - [04/Oct/2026:21:22:02 -0700] "GET /admin/.env HTTP/1.1" 404 58797 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
π¨π¦
Sakusen
2026-10-24 12:50:48
(2 days ago)
Automated web attack: 461 reqs, 112 paths probed, 409 returned 404; probed: 57 .env, 15 other, 10 .j ...
show more
Automated web attack: 461 reqs, 112 paths probed, 409 returned 404; probed: 57 .env, 15 other, 10 .json, 9 .git, 5 .php, 4 cloud-cred, 4 secret, 3 .yml, 2 config, 1 .jsp, 1 .sql, 1 log
show less
Hacking
Bad Web Bot
Web App Attack
π©πͺ
33three
2026-10-24 12:06:27
(2 days ago)
Fail2Ban jail WebAttack triggered
Brute-Force
π¦πΉ
SecMario
2026-10-24 12:02:31
(2 days ago)
CrowdSec/fail2ban: appsec-vpatch, http-crawl-non_statics, http-probing, http-sensitive-files, vpatch ...
show more
CrowdSec/fail2ban: appsec-vpatch, http-crawl-non_statics, http-probing, http-sensitive-files, vpatch-env-access (WAF), vpatch-git-config (WAF), vpatch-symfony-profiler (WAF)
show less
Hacking
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-10-24 11:32:06
(2 days ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
thetomtaylor.co.uk
2026-10-24 11:30:06
(2 days ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [wa01,wa02]
Hacking
SQL Injection
Web App Attack