๐ฉ๐ช
enjoyably
2026-10-19 13:33:57
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-crawl-non_statics
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Alt255
2026-10-19 11:43:49
(3 hours ago)
[cb-10al] Excessive 404 errors (web scanning): 35 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-10al] Excessive 404 errors (web scanning): 35 suspicious requests detected by fail2ban jail nginx-404. Example: 104.196.203.105 - - [19/Oct/2026:13:43:46 +0200] "GET /settings HTTP/1.0" 404 8240 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
104.196.203.105 - - [19/Oct/2026:13:43:46 +0200] "GET /billing HTTP/1.0" 404 8240 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
104.196.203.105 - - [19/Oct/2026:13:43:47 +0200] "GET /backoffice HTTP/1.0" 404 3273 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0"
104.196.203.105 - - [19/Oct/2026:13:43:47 +0200] "GET /wgg4vwrezk74w85pg0c7 HTTP/1.0" 404 3273 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://w
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-19 08:21:17
(6 hours ago)
20 attempts against mh-misbehave-ban on mars
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Joop
2026-10-19 08:20:36
(6 hours ago)
2026-10-19 10:20:32 +0200 s2 /.git/config
Web App Attack
๐ต๐ฑ
miriks
2026-10-19 06:52:00
(8 hours ago)
Automated scan detected: POST /graphql โ UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
Automated scan detected: POST /graphql โ UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
show less
Port Scan
Web App Attack
๐ณ๐ฑ
OrangeFlamingo
2026-10-19 06:36:18
(8 hours ago)
2026-10-19 06:36:17 WARN Probe detected: uri=/api/server/.env ip=104.196.203.105
...
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-19 06:33:28
(8 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ฉ๐ช
larse99
2026-10-19 06:31:30
(8 hours ago)
Detected Scanning / Hacking activity
Port Scan
Hacking
๐ณ๐ฑ
Alt255
2026-10-19 06:07:15
(9 hours ago)
[cb-01vi] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01vi] Web exploit scanning: 5 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.196.203.105 - - [19/Oct/2026:08:07:03 +0200] "GET /img../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
enjoyably
2026-10-19 06:07:06
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ธ๐ฌ
simpeg-adm.bandung.go.id
2026-10-19 06:03:27
(9 hours ago)
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/z9x8c7v6b5-debug-trigger-app.denisevanduren.nl"
19/Oct/ ...
show more
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/z9x8c7v6b5-debug-trigger-app.denisevanduren.nl"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/ojugjmy2mzgpf5iup188"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/dist/manifest.json"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/5kxlmz5kgbm4lbcp2jlh"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/dist/.vite/manifest.json"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/.vite/manifest.json"
19/Oct/2026:06:03:27 +0000;104.196.203.105;"/lib/terminal-xhr.php"
...
show less
Web Spam
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 05:44:17
(9 hours ago)
[ti-hoogstraov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Exampl ...
show more
[ti-hoogstraov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 104.196.203.105 - - \[19/Oct/2026:07:44:05 +0200\] "GET /img../.env HTTP/1.1" 404 7396 "-" "Mozilla/5.0 \(compatible\; Meta-ExternalFetcher/1.0\; +https://developers.facebook.com/docs/sharing/webmasters/crawler\)"
104.196.203.105 - - \[19/Oct/2026:07:44:05 +0200\] "GET /files../.env HTTP/1.1" 404 7396 "-" "Mozilla/5.0 \(compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/\)"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
enjoyably
2026-10-19 05:41:19
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
๐ง๐ท
dermatovirtual
2026-10-19 05:04:37
(10 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 147 unauthorized requests recorded between 2026-10-18 05:02:02 UTC and 2026-10-18 05:02:12 UTC (rate: ~147 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-18 05:02:11 UTC] IP: 104.196.203.105 - W3C IIS (Port 443): GET /.env -> HTTP 404 [CLIENT: 104.196.203.105]
[2026-10-18 05:02:11 UTC] IP: 104.196.203.105 - W3C IIS (Port 443): GET /.env.example -> HTTP 404 [CLIENT: 104.196.203.105]
[2026-10-18 05:02:12 UTC] IP: 104.196.203.105 - W3C IIS (Port 443): GET /admin/.env -> HTTP 404 [CLIENT: 104.196.203.105]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
jormaster3k
2026-10-19 04:21:40
(10 hours ago)
Attack against Apache (too many 404s)
Web App Attack