🇳🇱
Alt255
2026-11-14 09:02:35
UTC ·
(23 hours ago)
[ti-spijkov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [14/Nov/2026:10:02:18 +0100] "GET /.git/HEAD HTTP/1.1" 200 13784 "https://www.google.com/search?q=dakkapel-numansdorp.nl" " ...
show more
[ti-spijkov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [14/Nov/2026:10:02:18 +0100] "GET /.git/HEAD HTTP/1.1" 200 13784 "https://www.google.com/search?q=dakkapel-numansdorp.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-11-12 04:45:00
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-07 17:34:20
UTC ·
(1 week ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [07/Nov/2026:18:34:08 +0100] "GET /.env.production.local HTTP/1.1" 404 7908 "https://www.google.com/search?q=apideboer.bdaconne ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [07/Nov/2026:18:34:08 +0100] "GET /.env.production.local HTTP/1.1" 404 7908 "https://www.google.com/search?q=apideboer.bdaconnect.nl" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-11-07 17:25:27
UTC ·
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Alt255
2026-10-31 05:18:53
UTC ·
(2 weeks ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.159.144 - - \[31/Oct/2026:06:18:27 +0100\] "GET /.env.save HTTP/1.1" 404 8001 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.159.144 - - \[31/Oct/2026:06:18:27 +0100\] "GET /.env.save HTTP/1.1" 404 8001 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot\)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-30 15:42:13
UTC ·
(2 weeks ago)
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [30/Oct/2026:16:42:01 +0100] "GET /ngu-business-portal/.env.dist HTTP/1.1" 404 105972 "https://brainhubb.ai/.env.dist" "Mozill ...
show more
[ti-26al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [30/Oct/2026:16:42:01 +0100] "GET /ngu-business-portal/.env.dist HTTP/1.1" 404 105972 "https://brainhubb.ai/.env.dist" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-30 14:45:14
UTC ·
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Alt255
2026-10-29 02:09:03
UTC ·
(2 weeks ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [29/Oct/2026:03:08:51 +0100] "GET /.env.production.local HTTP/1.1" 301 6397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv: ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [29/Oct/2026:03:08:51 +0100] "GET /.env.production.local HTTP/1.1" 301 6397 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-28 02:59:04
UTC ·
(2 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Alt255
2026-10-27 09:48:40
UTC ·
(2 weeks ago)
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [27/Oct/2026:10:48:24 +0100] "GET /.env.dist HTTP/1.1" 404 84909 "https://www.google.com/search?q=hoekwerk.com" "Mozilla/5.0 ( ...
show more
[ti-02ra] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [27/Oct/2026:10:48:24 +0100] "GET /.env.dist HTTP/1.1" 404 84909 "https://www.google.com/search?q=hoekwerk.com" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FeG Deutschland
2026-10-27 07:52:08
UTC ·
(2 weeks ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-10-26 08:48:25
UTC ·
(2 weeks ago)
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [26/Oct/2026:09:48:11 +0100] "GET /.git/HEAD HTTP/1.1" 301 549 "https://www.google.com/search?q=www.stukadoorsbedrijfrijnmond. ...
show more
[ti-02ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [26/Oct/2026:09:48:11 +0100] "GET /.git/HEAD HTTP/1.1" 301 549 "https://www.google.com/search?q=www.stukadoorsbedrijfrijnmond.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-24 14:19:07
UTC ·
(3 weeks ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [24/Oct/2026:16:18:46 +0200] "GET /.env.development.local HTTP/1.1" 301 6199 "https://www.google.com/search?q=www.sahayoga.nl" ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.144 - - [24/Oct/2026:16:18:46 +0200] "GET /.env.development.local HTTP/1.1" 301 6199 "https://www.google.com/search?q=www.sahayoga.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-11 12:08:34
UTC ·
(2 months ago)
104.28.159.144 - - \[06/Sep/2026:16:29:32 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///root/.ssh/id_rsa\&environmentName=rsc HTTP/2.0" 404 1863 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
104.28.159.144 - - \[06/Se ...
show more
104.28.159.144 - - \[06/Sep/2026:16:29:32 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///root/.ssh/id_rsa\&environmentName=rsc HTTP/2.0" 404 1863 "-" "DuckAssistBot/1.1 \(https://duckduckgo.com/duckassistbot\)"
104.28.159.144 - - \[06/Sep/2026:16:29:33 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///app/.env\&environmentName=rsc HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(compatible\; MoonshotBot/1.0\; +https://kimi.ai/\)"
104.28.159.144 - - \[06/Sep/2026:16:29:33 +0200\] "GET /__vite_rsc_findSourceMapURL\?filename=file:///root/.aws/credentials\&environmentName=rsc HTTP/2.0" 403 471 "-" "Mozilla/5.0 \(compatible\; Bravebot/1.0\; +https://brave.com/search/\)"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-06 13:56:26
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
