🇩🇪
FeG Deutschland
2026-11-14 04:28:59
UTC ·
(23 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-14 02:52:21
UTC ·
(1 day ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [14/Nov/2026:03:51:59 +0100] "GET / HTTP/1.1" 301 4349 "http://www.partnersforinnovation.nl/.env.production" "Mozilla/5.0 Appl ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [14/Nov/2026:03:51:59 +0100] "GET / HTTP/1.1" 301 4349 "http://www.partnersforinnovation.nl/.env.production" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-11-14 00:58:39
UTC ·
(1 day ago)
WordPress fingerprinting and attack surface probing
Port Scan
Web App Attack
🇳🇱
Alt255
2026-11-13 16:55:32
UTC ·
(1 day ago)
[ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.157.182 - - \[13/Nov/2026:17:55:17 +0100\] "GET /.env.development.local HTTP/1.1" 404 7410 "https://www.google.com/search\?q=apirobers.bdaconnect.nl ...
show more
[ftpbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.157.182 - - \[13/Nov/2026:17:55:17 +0100\] "GET /.env.development.local HTTP/1.1" 404 7410 "https://www.google.com/search\?q=apirobers.bdaconnect.nl" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
BlueWire Hosting
2026-11-13 14:14:14
UTC ·
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
Alt255
2026-11-13 02:51:26
UTC ·
(2 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [13/Nov/2026:03:48:57 +0100] "GET /.git/HEAD HTTP/1.1" 404 391917 "https://www.google.com/search?q=kwastendag013.nl" "Mozilla/ ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [13/Nov/2026:03:48:57 +0100] "GET /.git/HEAD HTTP/1.1" 404 391917 "https://www.google.com/search?q=kwastendag013.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
paulshipley.com.au
2026-11-12 19:34:42
UTC ·
(2 days ago)
[Fri Nov 13 06:34:40.816503 2026] [security2:error] [pid 568358] [client 104.28.157.182:15788] [client 104.28.157.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/RE ...
show more
[Fri Nov 13 06:34:40.816503 2026] [security2:error] [pid 568358] [client 104.28.157.182:15788] [client 104.28.157.182] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "levellapromotions.com.au"] [uri "/.env.sample"] [unique_id "avYU0LV_jyPxPJ6k8MOZ0QAAAAk"], referer: https://focuspromo.com.au/.env.sample
...
show less
Web App Attack
🇫🇷
Batz
2026-11-12 15:22:26
UTC ·
(2 days ago)
Automated, Web, Bot, hunting, for, hidden, .env, /, AI, API, Credentials
Port Scan
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-12 02:28:32
UTC ·
(3 days ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [12/Nov/2026:03:28:24 +0100] "GET /home HTTP/1.1" 200 14479 "https://bernadette.websitedemo.nl/wp-config.php.bak" "Mozilla/5.0 ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.157.182 - - [12/Nov/2026:03:28:24 +0100] "GET /home HTTP/1.1" 200 14479 "https://bernadette.websitedemo.nl/wp-config.php.bak" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-11 12:56:15
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇧🇷
diego
2025-01-27 01:06:02
UTC ·
(1 year ago)
Events: TCP SYN Discovery or Flooding, Seen 3 times in the last 10800 seconds
DDoS Attack
2025-01-13 19:50:08
UTC ·
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2024-12-28 07:25:10
UTC ·
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2024-12-21 17:30:09
UTC ·
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
2024-12-18 17:25:24
UTC ·
(1 year ago)
Unauthorized connection attempt detected in the last 24 hours
Hacking
