|
๐ฉ๐ช
MBombeck
|
|
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
|
Web App Attack
|
|
๐ฌ๐ง
openstrike.co.uk
|
|
226 attacks on config grabbing URLs (type 2), env grabbing URLs, directory traversals, shell probes, env grabbing URLs (type 2), password/key grabbing URLs, PHP URLs, VC URLs:
GET /config/database.json HTTP/1.1
GET /supabase/.env HTTP/1.1
GET /..%2f. ...
show more
226 attacks on config grabbing URLs (type 2), env grabbing URLs, directory traversals, shell probes, env grabbing URLs (type 2), password/key grabbing URLs, PHP URLs, VC URLs:
GET /config/database.json HTTP/1.1
GET /supabase/.env HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1
GET /Dockerrun.aws.json HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /.git/config HTTP/1.1
show less
|
Hacking
Web App Attack
|
|
๐ฒ๐ฝ
octageeks.com
|
|
Wordpress malicious attack:[octaflood]
|
Web App Attack
|
|
๐ณ๐ฑ
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
๐ฉ๐ช
Fahreddin Ergin
|
|
2026-10-12 10:38:25,529 fail2ban.actions [565]: NOTICE [traefik-flood] Ban 35.246.226.137
2026-10-12 10:38:27,013 fail2ban.actions [565]: NOTICE [traefik-botscan] Ban 35.246.226.137
2026-10-13 01:15:44,535 fail2ban.actions [565 ...
show more
2026-10-12 10:38:25,529 fail2ban.actions [565]: NOTICE [traefik-flood] Ban 35.246.226.137
2026-10-12 10:38:27,013 fail2ban.actions [565]: NOTICE [traefik-botscan] Ban 35.246.226.137
2026-10-13 01:15:44,535 fail2ban.actions [565]: NOTICE [traefik-flood] Ban 35.246.226.137
...
show less
|
Brute-Force
SSH
|
|
๐ณ๐ฑ
homeshowdomain.nl
|
|
Auto-ban: >3000 req/min op 2026-10-12
|
Web App Attack
SSH
Hacking
|
|
๐ฉ๐ช
pscriptos
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
|
Web App Attack
Hacking
|
|
Anonymous
|
|
Web App Attack
|
Brute-Force
Exploited Host
Web App Attack
|
|
Anonymous
|
|
Abuse detected: rate-limit and/or cross-site thresholds exceeded.
|
Bad Web Bot
|
|
๐ฎ๐น
CoreTech srl
|
|
cloudlinux2 fail2ban: 2026-10-12 12:59:20,663 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 23.239.29.46 - 2026-10-12 12:59:18cloudlinux2 fail2ban: 2026-10-12 13:01:11,033 fail2ban.filter [1878]: INFO [plesk-modsecurity] ...
show more
cloudlinux2 fail2ban: 2026-10-12 12:59:20,663 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 23.239.29.46 - 2026-10-12 12:59:18cloudlinux2 fail2ban: 2026-10-12 13:01:11,033 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 54.189.50.41 - 2026-10-12 13:01:11cloudlinux2 fail2ban: 2026-10-12 13:01:08,061 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 16.144.239.180 - 2026-10-12 13:01:08cloudlinux2 fail2ban: 2026-10-12 13:01:10,579 fail2ban.actions [1878]: NOTICE [plesk-modsecurity] Unban 39.57.193.50cloudlinux2 fail2ban: 2026-10-12 13:01:07,300 fail2ban.filter [1878]: INFO [plesk-wordpress] Found 92.205.211.35 - 2026-10-12 13:01:06cloudlinux2 fail2ban: 2026-10-12 13:01:12,646 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 184.32.142.57 - 2026-10-12 13:01:12cloudlinux2 fail2ban: 2026-10-12 13:01:24,457 fail2ban.filter [1878]: INFO [plesk-modsecurity] Found 35.246.226.137 - 2026-10-12 13:01:24cloudlinux2 fail2ban:
show less
|
Web App Attack
|
|
๐ฉ๐ช
Gwyneth Llewelyn
|
|
2026/10/12 15:35:38 [error] 4060693#4060693: *2514495 access forbidden by rule, client: 35.246.226.137, server: vp-arc.org, request: "GET /public.api/.env HTTP/2.0", host: "vp-arc.org"
2026/10/12 15:35:39 [error] 4060693#4060693: *2514495 access forb ...
show more
2026/10/12 15:35:38 [error] 4060693#4060693: *2514495 access forbidden by rule, client: 35.246.226.137, server: vp-arc.org, request: "GET /public.api/.env HTTP/2.0", host: "vp-arc.org"
2026/10/12 15:35:39 [error] 4060693#4060693: *2514495 access forbidden by rule, client: 35.246.226.137, server: vp-arc.org, request: "GET /_nuxt/../.env HTTP/2.0", host: "vp-arc.org"
2026/10/12 15:35:39 [error] 4060693#4060693: *2514495 access forbidden by rule, client: 35.246.226.137, server: vp-arc.org, request: "GET /api/orders/..%2f..%2f.env HTTP/2.0", host: "vp-arc.org"
show less
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
IP matched detection query more than 2 hosts and only bad rq long ban.
|
Brute-Force
Web App Attack
Hacking
|
|
๐ฉ๐ช
Jarda_H
|
|
http-probing
|
Web App Attack
|
|
๐ฉ๐ช
FD-IX
|
|
Fail2Ban: ModSecurity detected a web application attack.
|
Bad Web Bot
Web App Attack
|
|
Anonymous
|
|
IP matched detection query 20 more in short time bad rqs.
|
Brute-Force
Web App Attack
Hacking
|