🇳🇱
Alt255
2026-11-12 05:14:23
UTC ·
(2 days ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [12/Nov/2026:06:14:13 +0100] "GET /.env HTTP/1.1" 301 6249 "https://www.google.com/search?q=www.rugnetwerkdh.nl" "Mozilla/5.0 ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [12/Nov/2026:06:14:13 +0100] "GET /.env HTTP/1.1" 301 6249 "https://www.google.com/search?q=www.rugnetwerkdh.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-28 22:38:32
UTC ·
(2 weeks ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [28/Oct/2026:23:38:22 +0100] "GET /.env.sample HTTP/1.1" 404 99663 "https://www.google.com/search?q=www.biomagazine.nl" "Mozil ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [28/Oct/2026:23:38:22 +0100] "GET /.env.sample HTTP/1.1" 404 99663 "https://www.google.com/search?q=www.biomagazine.nl" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-27 22:09:47
UTC ·
(2 weeks ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [27/Oct/2026:23:09:38 +0100] "GET /.env.test HTTP/1.1" 404 7381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537 ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [27/Oct/2026:23:09:38 +0100] "GET /.env.test HTTP/1.1" 404 7381 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-26 08:27:25
UTC ·
(2 weeks ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [26/Oct/2026:09:27:17 +0100] "GET /.env.old HTTP/1.1" 301 6368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/6 ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.159.149 - - [26/Oct/2026:09:27:17 +0100] "GET /.env.old HTTP/1.1" 301 6368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-07-25 02:20:55
UTC ·
(3 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-07-19 04:30:21
UTC ·
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇺🇸
NXTwoThou
2026-07-16 23:11:49
UTC ·
(3 months ago)
SMTP AUTH LOGIN
Brute-Force
2026-07-15 16:30:29
UTC ·
(3 months ago)
Failed login attempt detected by Fail2Ban in plesk-postfix jail
Brute-Force
🇷🇴
iulianh
2026-07-15 10:03:45
UTC ·
(3 months ago)
25,465,587
Brute-Force
SSH
🇮🇹
VHosting
2026-06-27 10:34:56
UTC ·
(4 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇮🇹
VHosting
2026-04-29 03:55:18
UTC ·
(6 months ago)
Detected mail brute force attack from 4 different servers
Brute-Force
🇸🇪
SkyDancer
2026-04-16 08:02:37
UTC ·
(6 months ago)
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai via interface.
Hacking
Brute-Force
SSH
🇳🇱
wlt-blocker
2026-04-15 14:27:17
UTC ·
(6 months ago)
Unauthorized access to webpage admin
Web App Attack
🇩🇪
4server
2026-04-15 10:25:43
UTC ·
(6 months ago)
[WedApr1512:25:40.0063132026][security2:error][pid3378468:tid3378474][client104.28.159.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\ ...
show more
[WedApr1512:25:40.0063132026][security2:error][pid3378468:tid3378474][client104.28.159.149:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\b\(\?:\\\\\\\\.\(\?:ht\(\?:access\|passwd\|group\)\|www_\?acl\)\|global\\\\\\\\.asa\|httpd\\\\\\\\.conf\|boot\\\\\\\\.ini\|web.config\)\\\\\\\\b\|\(\|\^\|\\\\\\\\.\\\\\\\\.\)/etc/\|/\\\\\\\\.\(\?:history\|bash_history\|sh_history\|env\)\$\)\"atREQUEST_FILENAME.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"204\"][id\"390709\"][rev\"30\"][msg\"Atomicorp.comWAFRules:Attempttoaccessprotectedfileremotely\"][data\"/.env\"][severity\"CRITICAL\"][hostname\"worldgoldfundltd.com\"][uri\"/frontend/.env\"][unique_id\"ad9npPhacmZS8B_y76HAnAAAAAM\"]
show less
Port Scan
Brute-Force
Web App Attack
🇹🇷
Doruk
2026-04-02 15:20:02
UTC ·
(7 months ago)
Unauthorized connection attempt
Brute-Force
