🇳🇱
Alt255
2026-11-14 22:23:36
UTC ·
(9 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [14/Nov/2026:23:23:15 +0100] "GET /.env.backup HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537 ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [14/Nov/2026:23:23:15 +0100] "GET /.env.backup HTTP/1.1" 301 563 "-" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-11-14 14:58:33
UTC ·
(17 hours ago)
fail2ban jail apache-secrets-probe: 104.28.162.109 - - [26/Oct/2026:00:23:34 -0700] "GET /wp-config.php.bak HTTP/1.1" 404 69468 "https://www.vikchaudhary.com/wp-config.php.bak" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-U ...
show more
fail2ban jail apache-secrets-probe: 104.28.162.109 - - [26/Oct/2026:00:23:34 -0700] "GET /wp-config.php.bak HTTP/1.1" 404 69468 "https://www.vikchaudhary.com/wp-config.php.bak" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
show less
Web App Attack
🇨🇭
TheCoon
2026-11-14 10:43:16
UTC ·
(21 hours ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-11-13 07:00:58
UTC ·
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇬🇧
eXcalibre
2026-11-13 02:12:30
UTC ·
(2 days ago)
[Fri Nov 13 02:12:29.217303 2026] [proxy_fcgi:error] [pid 2031604:tid 2031638] [client 104.28.162.109:44280] AH01071: Got error 'Primary script unknown', referer: <redacted>
...
Hacking
🇳🇱
Alt255
2026-11-12 19:15:51
UTC ·
(2 days ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.109 - - \[12/Nov/2026:20:15:33 +0100\] "GET /.aws/credentials HTTP/1.1" 404 7429 "http://livescore.wheelgymnastics.nl/.aws/credentials" "Mozil ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.162.109 - - \[12/Nov/2026:20:15:33 +0100\] "GET /.aws/credentials HTTP/1.1" 404 7429 "http://livescore.wheelgymnastics.nl/.aws/credentials" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; ChatGPT-User/1.0\; +https://openai.com/bot\)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-12 03:10:04
UTC ·
(3 days ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [12/Nov/2026:04:09:44 +0100] "GET /.env.old HTTP/1.1" 404 2101 "https://www.google.com/search?q=securemail.mzoem.nl" "Mozilla/ ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [12/Nov/2026:04:09:44 +0100] "GET /.env.old HTTP/1.1" 404 2101 "https://www.google.com/search?q=securemail.mzoem.nl" "Mozilla/5.0 (Linux; Android 14; Pixel 8) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.6422.113 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-11-12 00:26:09
UTC ·
(3 days ago)
25,465,587
Brute-Force
SSH
🇩🇪
FeG Deutschland
2026-11-11 03:50:25
UTC ·
(4 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇺🇸
Thermogenic
2026-11-10 18:38:46
UTC ·
(4 days ago)
Fail2Ban nginx-scanners: automated vulnerability scanning detected
Web App Attack
🇳🇱
Alt255
2026-11-10 04:29:01
UTC ·
(5 days ago)
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [10/Nov/2026:05:28:42 +0100] "GET / HTTP/1.1" 301 4197 "https://pipportal.nl/.env.sample" "Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
[ti-tinov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.162.109 - - [10/Nov/2026:05:28:42 +0100] "GET / HTTP/1.1" 301 4197 "https://pipportal.nl/.env.sample" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:137.0) Gecko/20100101 Firefox/137.0"
...
show less
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-11-09 17:40:40
UTC ·
(5 days ago)
[MonNov0918:40:35.1154862026][security2:error][pid3079649:tid3079741][client104.28.162.109:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949- ...
show more
[MonNov0918:40:35.1154862026][security2:error][pid3079649:tid3079741][client104.28.162.109:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"hosting-dominio.ch\"][uri\"/\"][unique_id\"avIFkySjvMK1APiwgyt8LwAAAQU\"]
show less
Hacking
Web App Attack
2026-11-08 14:41:52
UTC ·
(6 days ago)
104.28.162.109 (DE/Germany/Hesse/Dreieich/-/[redacted]
Hacking
🇨🇭
TheCoon
2026-11-08 10:48:44
UTC ·
(6 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇬🇧
consul.to
2026-11-07 18:11:04
UTC ·
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
