🇩🇪
Roper123
2026-11-13 18:05:25
UTC ·
(15 hours ago)
Web exploits
Web App Attack
🇳🇱
Alt255
2026-11-12 04:05:07
UTC ·
(2 days ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.161.211 - - [12/Nov/2026:05:04:46 +0100] "GET /.env.backup HTTP/1.1" 403 6108 "https://www.google.com/search?q=www.netwerkamateurkunst.nl" ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.161.211 - - [12/Nov/2026:05:04:46 +0100] "GET /.env.backup HTTP/1.1" 403 6108 "https://www.google.com/search?q=www.netwerkamateurkunst.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-11-12 02:45:04
UTC ·
(2 days ago)
Restricted File Access Attempts
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 21:46:42
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-10 10:56:58
UTC ·
(3 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.161.211 - - [10/Nov/2026:11:56:48 +0100] "GET /.env.bak HTTP/1.1" 200 6061 "https://groenehartonline.nl/.env.bak" "Mozilla/5.0 (compatible ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.161.211 - - [10/Nov/2026:11:56:48 +0100] "GET /.env.bak HTTP/1.1" 200 6061 "https://groenehartonline.nl/.env.bak" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
2026-07-29 14:54:27
UTC ·
(3 months ago)
[redacted] 104.28.161.211 - - [29/Jul/2026:16:53:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)"
[redacted] 104.28.161.211 - - [29/Jul/2026:16:54:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 42 ...
show more
[redacted] 104.28.161.211 - - [29/Jul/2026:16:53:50 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.5; WordPress 6.2)"
[redacted] 104.28.161.211 - - [29/Jul/2026:16:54:00 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.1)"
[redacted] 104.28.161.211 - - [29/Jul/2026:16:54:11 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/13.0; WordPress/6.2; http://site99933554.com"
[redacted] 104.28.161.211 - - [29/Jul/2026:16:54:20 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.0; WordPress/6.3; http://site21560701.com"
[redacted] 104.28.161.211 - - [29/Jul/2026:16:54:27 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com"
...
show less
Hacking
Web App Attack
🇺🇸
kosada.com
2026-07-23 08:22:32
UTC ·
(3 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
🇺🇸
kosada.com
2026-06-29 13:26:06
UTC ·
(4 months ago)
Web bot: denial-of-service flood
DDoS Attack
Bad Web Bot
2026-05-19 14:53:50
UTC ·
(5 months ago)
[redacted] 104.28.161.211 - - [19/May/2026:16:53:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site88129689.com"
[redacted] 104.28.161.211 - - [19/May/2026:16:53:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 ...
show more
[redacted] 104.28.161.211 - - [19/May/2026:16:53:08 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack/12.1; WordPress/6.3; http://site88129689.com"
[redacted] 104.28.161.211 - - [19/May/2026:16:53:18 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.0; WordPress 6.3)"
[redacted] 104.28.161.211 - - [19/May/2026:16:53:28 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.4)"
[redacted] 104.28.161.211 - - [19/May/2026:16:53:38 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 13.0; WordPress 6.3)"
[redacted] 104.28.161.211 - - [19/May/2026:16:53:48 +0200] "POST /xmlrpc.php HTTP/1.1" 405 428 "-" "Jetpack by WordPress.com (Jetpack 12.1; WordPress 6.3)"
...
show less
Hacking
Web App Attack
🇫🇷
SpaceHost-Server
2026-04-20 22:26:17
UTC ·
(6 months ago)
Brute-Force
Web App Attack
🇨🇦
zXero
2026-04-20 19:41:48
UTC ·
(6 months ago)
Fail2Ban automatic report - jail: geoip-ssh
Brute-Force
SSH
DDoS Attack
🇩🇪
macrob
2026-04-20 19:40:15
UTC ·
(6 months ago)
2026/04/20 19:40:09 [error] 1649438#1649438: *165771399 access forbidden by rule, client: 104.28.161.211, server: binixo.com.ua, request: "GET /.env.binixo HTTP/1.1", host: "binixo.com.ua"
2026/04/20 19:40:10 [error] 1649438#1649438: *165771429 acces ...
show more
2026/04/20 19:40:09 [error] 1649438#1649438: *165771399 access forbidden by rule, client: 104.28.161.211, server: binixo.com.ua, request: "GET /.env.binixo HTTP/1.1", host: "binixo.com.ua"
2026/04/20 19:40:10 [error] 1649438#1649438: *165771429 access forbidden by rule, client: 104.28.161.211, server: binixo.com.ua, request: "GET /backup.bak HTTP/1.1", host: "binixo.com.ua"
2026/04/20 19:40:14 [error] 1649437#1649437: *165771537 access forbidden by rule, client: 104.28.161.211, server: binixo.com.ua, request: "GET /sql.bak HTTP/1.1", host: "binixo.com.ua"
...
show less
Web App Attack
🇺🇸
MSchienle
2026-04-20 18:36:12
UTC ·
(6 months ago)
2026-04-20 13:35:00.339728-0500 localhost sshd-session[58341]: Failed password for invalid user centra from 104.28.161.211 port 15421 ssh2
Brute-Force
🇺🇦
URAN Publishing Service
2026-04-20 17:53:41
UTC ·
(6 months ago)
104.28.161.211 - - [20/Apr/2026:20:53:40 +0300] "POST /wp-content/plugins/age-verification/age-verification.php HTTP/1.1" 404 3339 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:78.0) Gecko/20100101 Firefox/78.0"
...
Web App Attack
🇺🇦
URAN Publishing Service
2026-04-20 15:53:10
UTC ·
(6 months ago)
104.28.161.211 - - [20/Apr/2026:18:53:05 +0300] "GET /wp-content/plugins/advanced-text-widget/readme.txt HTTP/1.1" 404 3299 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0"
...
Web App Attack
