๐ณ๐ฑ
Alt255
2026-10-25 13:52:31
(7 hours ago)
[ti-01ov] Web exploit scanning: 31 suspicious requests detected by fail2ban jail <name>. Example: 93 ...
show more
[ti-01ov] Web exploit scanning: 31 suspicious requests detected by fail2ban jail <name>. Example: 93.152.221.59 - - [22/Oct/2026:05:28:20 +0200] "GET / HTTP/1.1" 503 6107 "http://qargo.nl/.env.staging" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [22/Oct/2026:05:28:20 +0200] "GET / HTTP/1.1" 503 6107 "http://qargo.nl/.env.local" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [22/Oct/2026:05:28:20 +0200] "GET / HTTP/1.1" 503 6107 "http://qargo.nl/.env.production" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [22/Oct/2026:05:28:20 +0200] "GET / HTTP/1.1" 503 6107 "http://qargo.nl/.env.development" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-25 06:45:03
(15 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-25 06:25:06
(15 hours ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ฎ
sibahota
2026-10-25 04:30:40
(17 hours ago)
93.152.221.59 - - [25/Oct/2026:04:30:37 +0000] stockworld.co "GET /netlify.toml HTTP/1.1" 404 1134 0 ...
show more
93.152.221.59 - - [25/Oct/2026:04:30:37 +0000] stockworld.co "GET /netlify.toml HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" 172.17.0.1:8003 404 0.001 "http://stockworld.co/netlify.toml"
...
show less
Web App Attack
Brute-Force
๐ฆ๐บ
Proxay Fox
2026-10-25 04:01:59
(17 hours ago)
93.152.221.59 - - [25/Oct/2026:14:01:52 +1000] "GET /_next/static/_buildManifest.js HTTP/2.0" 404 14 ...
show more
93.152.221.59 - - [25/Oct/2026:14:01:52 +1000] "GET /_next/static/_buildManifest.js HTTP/2.0" 404 146 "http://ecoflo.com.au/_next/static/_buildManifest.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "93.152.221.59" 287 388 TLSv1.3/TLS_AES_256_GCM_SHA384 . 84aa6c59df84da1080d6f042d3563c12a9368800e499836316d31e64ac1a895b
93.152.221.59 - - [25/Oct/2026:14:01:55 +1000] "GET /.env.development HTTP/2.0" 404 22240 "http://ecoflo.com.au/.env.development" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "93.152.221.59" 269 22669 TLSv1.3/TLS_AES_256_GCM_SHA384 . 02f0b53a799e6ae6cddd545b22465a4a7e6adaede0eada1fd7304d368e689cef
93.152.221.59 - - [25/Oct/2026:14:01:55 +1000] "GET /.env.staging HTTP/2.0" 404 22239 "http://ecoflo.com.au/.env.staging" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "93.152.221.59" 263 22668 TLSv1.3/TLS_AES_256_GCM_SHA384 . 2fe513cdb391ee04430ffc07804cb84dcc252fe1ea887e1a76a297816245ebbe
93.152.221.59 - - [25/Oct/2026
...
show less
Brute-Force
Web App Attack
๐จ๐ฆ
CentiDevOps
2026-10-25 03:18:07
(18 hours ago)
Web app scan: 169 requests in 10 s across 2 domains (301/404). Paths: /.git/config, /.git/HEAD, /fr/ ...
show more
Web app scan: 169 requests in 10 s across 2 domains (301/404). Paths: /.git/config, /.git/HEAD, /fr/.git/HEAD (+55 more). Sample: 2026-10-25T03:18:07Z "GET /.env.production" 301
show less
Hacking
Web App Attack
๐ฉ๐ช
heyzg
2026-10-25 01:40:57
(20 hours ago)
HTTP secret_harvesting (observed): 89 HTTP
Brute-Force
๐ฌ๐ง
Celtic
2026-10-24 20:10:21
(1 day ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
๐ฉ๐ช
london2038.com
2026-10-24 19:56:17
(1 day ago)
Too many failed requests
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /_next/static/_buildMan ...
show more
Too many failed requests
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /_next/static/_buildManifest.js HTTP/1.1" 404 4187 "http://account.<REDACTED>/_next/static/_buildManifest.js" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /_next/static/chunks/main.js.map HTTP/1.1" 404 4187 "http://account.<REDACTED>/_next/static/chunks/main.js.map" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /admin HTTP/1.1" 404 4187 "http://account.<REDACTED>/admin" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /_next/static/chunks/pages/_app.js.map HTTP/1.1" 404 4187 "http://account.<REDACTED>/_next/static/chunks/pages/_app.js.map" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
93.152.221.59 - - [24/Oct/2026:21:56:15 +0200] "GET /settings HTTP/1.1" 404 4187 "http://account.<REDACTED>/settings" "Mozilla/5.
...
show less
Web Spam
Bad Web Bot
๐ฌ๐ง
consul.to
2026-10-24 18:30:40
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-24 18:25:03
(1 day ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
Anonymous
2026-10-24 14:12:25
(1 day ago)
fail2ban jail apache-secrets-probe: 93.152.221.59 - - [16/Oct/2026:14:20:12 -0700] "GET /.env.local ...
show more
fail2ban jail apache-secrets-probe: 93.152.221.59 - - [16/Oct/2026:14:20:12 -0700] "GET /.env.local HTTP/1.1" 301 542 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
show less
Web App Attack
๐ต๐ฑ
Budyn
2026-10-24 05:27:02
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: astropot.website | URI: /.env.development | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 | BODY: [Empty / GET Request] | HEADERS: {"Accept-Encoding":"gzip, br","X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"DE","Cf-Connecting-Ip":"93.152.221.59","Cdn-Loop":"cloudflare; loops=1","Cf-Ray":"a4f691f0dd24d26d-FRA","Connection":"Keep-Alive","Referer":"http:\/\/astropot.website\/.env.development","X-Forwarded-For":"93.152.221.59","X-Waf-Trigg
show less
Hacking
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-24 05:20:30
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-24 03:24:14
(1 day ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack