🇱🇻
GooddayGroup
2026-11-15 00:45:12
UTC ·
(3 hours ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
🇳🇱
homeshowdomain.nl
2026-11-14 22:59:52
UTC ·
(5 hours ago)
Auto-ban: >3000 req/min op 2026-11-14
Web App Attack
SSH
Hacking
🇺🇸
nyt
2026-11-14 22:44:10
UTC ·
(5 hours ago)
Repeated WordPress login POSTs blocked by WAF (3 in 6h)
Brute-Force
Web App Attack
🇩🇪
LRob
2026-11-14 19:32:24
UTC ·
(8 hours ago)
Not following 301 redirects — wasted requests | method: GET | path: / | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36
Bad Web Bot
🇫🇷
Rom74
2026-11-14 17:10:23
UTC ·
(11 hours ago)
[14/Nov/2026:17:10:21 +0000] - - 444 - GET https www.teslogiciels.com "/.env" [Client 125.166.9.135] [Length 0] [Gzip -] [Sent-to 192.168.1.15] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[14/Nov/2026:17:10:22 +0000] - - 444 - ...
show more
[14/Nov/2026:17:10:21 +0000] - - 444 - GET https www.teslogiciels.com "/.env" [Client 125.166.9.135] [Length 0] [Gzip -] [Sent-to 192.168.1.15] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[14/Nov/2026:17:10:22 +0000] - - 444 - GET https www.teslogiciels.com "/.env" [Client 125.166.9.135] [Length 0] [Gzip -] [Sent-to 192.168.1.15] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
[14/Nov/2026:17:10:22 +0000] - - 444 - GET https www.teslogiciels.com "/.env.local" [Client 125.166.9.135] [Length 0] [Gzip -] [Sent-to 192.168.1.15] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36" "-"
...
show less
Web App Attack
🇭🇺
BeeServers
2026-11-14 17:08:19
UTC ·
(11 hours ago)
125.166.9.135 - - [14/Nov/2026:18:07:31 +0100] "POST /paymenter/update HTTP/1.1" 500 19695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:32 +0100] "POST /paymenter/update HTTP/1.1" 500 19712 " ...
show more
125.166.9.135 - - [14/Nov/2026:18:07:31 +0100] "POST /paymenter/update HTTP/1.1" 500 19695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:32 +0100] "POST /paymenter/update HTTP/1.1" 500 19712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:34 +0100] "POST /paymenter/update HTTP/1.1" 500 19689 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:35 +0100] "POST /paymenter/update HTTP/1.1" 500 19692 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:40 +0100] "POST /paymenter/update HTTP/1.1" 500 19697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:41 +0100] "POST /paymenter/update HTTP/1.1" 500 19696 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:18:07:43 +0100] "POST
...
show less
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-11-14 15:18:58
UTC ·
(12 hours ago)
cloudlinux2 fail2ban: 2026-11-14 16:13:59,163 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.172 - 2026-11-14 16:13:59cloudlinux2 fail2ban: 2026-11-14 16:13:59,173 fail2ban.filter [1443]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-11-14 16:13:59,163 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.172 - 2026-11-14 16:13:59cloudlinux2 fail2ban: 2026-11-14 16:13:59,173 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 172.64.200.173 - 2026-11-14 16:13:59cloudlinux2 fail2ban: 2026-11-14 16:14:54,460 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 125.166.9.135 - 2026-11-14 16:14:54cloudlinux2 fail2ban: 2026-11-14 16:14:54,448 fail2ban.actions [1443]: NOTICE [plesk-modsecurity] Ban 125.166.9.135cloudlinux2 fail2ban: 2026-11-14 16:14:53,892 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 125.166.9.135 - 2026-11-14 16:14:53cloudlinux2 fail2ban: 2026-11-14 16:14:50,849 fail2ban.filter [1443]: INFO [plesk-wordpress] Found 103.109.96.168 - 2026-11-14 16:14:50cloudlinux2 fail2ban: 2026-11-14 16:14:53,667 fail2ban.filter [1443]: INFO [plesk-modsecurity] Found 125.166.9.135 - 2026-11-14 16:14:53cloudlinux2 fail2b
show less
Web App Attack
🇹🇷
Jova
2026-11-14 15:15:16
UTC ·
(13 hours ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇳🇱
MyGlobalFlowers
2026-11-14 14:21:03
UTC ·
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
Séfora Srl
2026-11-14 13:52:58
UTC ·
(14 hours ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
🇩🇪
Callum
2026-11-14 13:20:21
UTC ·
(14 hours ago)
probing for exposed files and admin pages, remote code execution attempts and login brute force: 19 attempts within 1 minutes, seen by web server log
Web App Attack
Hacking
Brute-Force
Anonymous
2026-11-14 12:25:03
UTC ·
(15 hours ago)
Bot / scanning and/or hacking attempts: POST /register HTTP/1.1, GET /public/.env HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.dev HTTP/1.1, POST / HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.development HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, ...
show more
Bot / scanning and/or hacking attempts: POST /register HTTP/1.1, GET /public/.env HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.dev HTTP/1.1, POST / HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.development HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /storage/.env HTTP/1.1, POST /login HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
debestelapp
2026-11-14 11:05:05
UTC ·
(17 hours ago)
Web App Attack
🇭🇺
BeeServers
2026-11-14 10:55:00
UTC ·
(17 hours ago)
125.166.9.135 - - [14/Nov/2026:11:54:43 +0100] "POST /paymenter/update HTTP/1.1" 500 19695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:44 +0100] "POST /paymenter/update HTTP/1.1" 500 19712 " ...
show more
125.166.9.135 - - [14/Nov/2026:11:54:43 +0100] "POST /paymenter/update HTTP/1.1" 500 19695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:44 +0100] "POST /paymenter/update HTTP/1.1" 500 19712 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:44 +0100] "POST /paymenter/update HTTP/1.1" 500 19691 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:48 +0100] "POST /paymenter/update HTTP/1.1" 500 19714 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:49 +0100] "POST /paymenter/update HTTP/1.1" 500 19695 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:49 +0100] "POST /paymenter/update HTTP/1.1" 500 19697 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
125.166.9.135 - - [14/Nov/2026:11:54:49 +0100] "POST
...
show less
Bad Web Bot
Web App Attack
🇨🇦
zXero
2026-11-14 10:45:32
UTC ·
(17 hours ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack