🇨🇭
TheCoon
2026-10-24 16:30:45
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
2026-10-24 14:05:30
(2 days ago)
fail2ban jail apache-secrets-probe: 34.67.93.218 - - [08/Sep/2026:12:48:16 -0700] "GET /.git/config ...
show more
fail2ban jail apache-secrets-probe: 34.67.93.218 - - [08/Sep/2026:12:48:16 -0700] "GET /.git/config HTTP/1.1" 404 7728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
show less
Web App Attack
🇨🇭
TheCoon
2026-10-23 06:35:48
(4 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
2026-10-21 13:39:11
(5 days ago)
fail2ban jail apache-secrets-probe: 34.67.93.218 - - [08/Sep/2026:12:48:16 -0700] "GET /.git/config ...
show more
fail2ban jail apache-secrets-probe: 34.67.93.218 - - [08/Sep/2026:12:48:16 -0700] "GET /.git/config HTTP/1.1" 404 7728 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36"
show less
Web App Attack
🇨🇭
TheCoon
2026-10-21 06:57:48
(6 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇦🇺
Klaverstyn
2026-10-17 04:58:06
(1 week ago)
Persistent attacker, repeat offender
Hacking
🇫🇷
JLMAYBE
2026-10-15 19:11:41
(1 week ago)
Predictascan IPGuard | ban trap | motif: sonde de chemin piège (fichier ou techno absente du site) | ...
show more
Predictascan IPGuard | ban trap | motif: sonde de chemin piège (fichier ou techno absente du site) | chemin: /.env | requetes bloquees: 1 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0
show less
Web App Attack
Bad Web Bot
🇩🇪
maxpower
2026-10-15 18:39:54
(1 week ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.67.93.218 (US/United States/218.93.67.34.bc ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.67.93.218 (US/United States/218.93.67.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/15 20:39:50 [error] 548652#548652: *3706293 access forbidden by rule, client: 34.67.93.218, server: abruzzotour.it.pegasoadv.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "abruzzotour.it.pegasoadv.it"
2026/10/15 20:39:50 [error] 548667#548667: *3706296 access forbidden by rule, client: 34.67.93.218, server: abruzzotour.it.pegasoadv.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "abruzzotour.it.pegasoadv.it"
2026/10/15 20:39:50 [error] 548652#548652: *3706293 access forbidden by rule, client: 34.67.93.218, server: abruzzotour.it.pegasoadv.it, request: "GET /wp-config.php.old HTTP/1.1", host: "abruzzotour.it.pegasoadv.it"
show less
Port Scan
🇩🇪
maxpower
2026-10-15 17:21:41
(1 week ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.67.93.218 (US/United States/218.93.67.34.bc ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.67.93.218 (US/United States/218.93.67.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/10/15 19:21:40 [error] 503881#503881: *3690218 access forbidden by rule, client: 34.67.93.218, server: portacellulare.egroupadv.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "portacellulare.egroupadv.it"
2026/10/15 19:21:40 [error] 503886#503886: *3690219 access forbidden by rule, client: 34.67.93.218, server: portacellulare.egroupadv.it, request: "GET /wp-config.php.bak HTTP/1.1", host: "portacellulare.egroupadv.it"
2026/10/15 19:21:40 [error] 503881#503881: *3690218 access forbidden by rule, client: 34.67.93.218, server: portacellulare.egroupadv.it, request: "GET /wp-config.php.old HTTP/1.1", host: "portacellulare.egroupadv.it"
show less
Port Scan
🇩🇪
IVski.com
2026-10-15 14:46:45
(1 week ago)
IVski WAF | Sensitive file probe detected - looking for .env
Hacking
Brute-Force
Web App Attack
🇮🇩
Burayot
2026-10-15 12:52:23
(1 week ago)
LF_APACHE_403: 34.67.93.218 (US/United States/218.93.67.34.bc.googleusercontent.com), more than 10 A ...
show more
LF_APACHE_403: 34.67.93.218 (US/United States/218.93.67.34.bc.googleusercontent.com), more than 10 Apache 403 hits in the last 3600 secs
show less
Web App Attack
🇩🇪
palla89
2026-10-15 07:06:30
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.67.93.218 (US/United States/218.93.6 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.67.93.218 (US/United States/218.93.67.34.bc.googleusercontent.com)
show less
SQL Injection
🇵🇱
Budyn
2026-10-15 01:39:52
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cpanel.astropot.tech | URI: /.env | UA: Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-14 23:55:35
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
ConsulHosting
2026-10-14 19:46:10
(1 week ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack