🇳🇱
Alt255
2026-10-06 23:58:59
(13 hours ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 136.108.135.201 - - [07/Oct/2026:01:58:57 +0200] "GET /public../.env HTTP/2.0" 403 346 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
zumbo.net
2026-10-06 20:35:32
(17 hours ago)
[Tue Oct 06 23:35:28.901038 2026] [proxy_fcgi:error] [pid 600560:tid 600594] [client 136.108.135.201 ...
show more
[Tue Oct 06 23:35:28.901038 2026] [proxy_fcgi:error] [pid 600560:tid 600594] [client 136.108.135.201:0] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 23:35:31.642415 2026] [proxy_fcgi:error] [pid 600557:tid 600607] [client 136.108.135.201:0] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 23:35:31.655654 2026] [proxy_fcgi:error] [pid 600560:tid 600589] [client 136.108.135.201:0] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 23:35:31.657811 2026] [proxy_fcgi:error] [pid 600557:tid 600575] [client 136.108.135.201:0] AH01071: Got error 'Primary script unknown'
[Tue Oct 06 23:35:31.667008 2026] [proxy_fcgi:error] [pid 600560:tid 600566] [client 136.108.135.201:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇩🇪
ardexter
2026-10-06 20:27:26
(17 hours ago)
Wordpress attack and DDOS
DDoS Attack
Web App Attack
🇫🇷
masterguru
2026-10-06 20:12:33
(17 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
2026-10-06 19:20:32
(18 hours ago)
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
GET / | rule: automated-client-blocked | ua: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36 EdgA/153.0.0.0
show less
Bad Web Bot
🇺🇸
RamSet
2026-10-06 18:47:55
(18 hours ago)
[ycr] HTTP-Probe on port 443 (via domain). 177 distinct paths probed in 6s. Sustained 185 req/min, 1 ...
show more
[ycr] HTTP-Probe on port 443 (via domain). 177 distinct paths probed in 6s. Sustained 185 req/min, 158 nonexistent paths (404). Paths: /.ssh/id_ed25519, /.ssh/id_rsa, /.htpasswd, /.ssh/config, /@fs/src/.env?raw??, /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw??, /@fs/../.env?raw??, /@fs/app/.env?raw??, /@fs/root/.aws/credentials?raw??, /@fs/.env?raw&url??, /@fs/.env?url&raw??, /@fs/proc/self/cwd/.env?raw??, /@fs/home/ec2-user/.aws/credentials?raw??, /@fs/home/ubuntu/.aws/credentials?raw??, /@fs/var/task/.env?raw??, /@fs/src/.env?import&raw??, /@fs/../.env?import&raw??, /@fs/app/.env?import&raw??, /@fs/.env?import&?raw??, /@fs/app/.env.local?import&raw??, /@fs/app/.env.production?import&raw??, /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc, /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc, /.env.local?raw, /.env.local?import&raw, /.env?import&url&inline, /.env?raw, /.env?import&raw, …
show less
Bad Web Bot
Web App Attack
🇺🇸
Rip
2026-10-06 17:45:25
(19 hours ago)
403 Errors: Access Forbidden
Brute-Force
🇬🇧
WebNiraj
2026-10-06 16:35:45
(21 hours ago)
(mod_security) mod_security (id:949110) triggered by 136.108.135.201 (US/United States/201.135.108.1 ...
show more
(mod_security) mod_security (id:949110) triggered by 136.108.135.201 (US/United States/201.135.108.136.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force
SSH
🇨🇦
zXero
2026-10-06 16:24:58
(21 hours ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
🇺🇸
interbiznw.com
2026-10-06 15:57:03
(21 hours ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-10-06 15:46:01
(21 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196)
show less
Hacking
🇸🇪
vaia.cloud
2026-10-06 14:35:02
(23 hours ago)
crowdsecurity/http-cve-2021-41773
Brute-Force
Web App Attack
🇪🇸
XiDeRo
2026-10-06 12:47:01
(1 day ago)
IP bloqueada por puntuación de karma acumulada (Guardian Web v2).
Port Scan
Web App Attack
🇫🇷
dynamix
2026-10-06 11:14:15
(1 day ago)
Multiple WAF Violations
Web App Attack
2026-10-06 11:07:33
(1 day ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
