🇸🇬
rocky limit
2026-09-05 14:43:58
(2 hours ago)
Fail2ban jail 'nginx-badbots' - 2 failed attempts
Port Scan
Hacking
🇷🇸
Smel
2026-09-05 14:15:09
(3 hours ago)
MH/MP Probe, Scan, Hack -
Port Scan
Hacking
🇺🇸
NXTwoThou
2026-09-05 13:51:46
(3 hours ago)
174.78
Web App Attack
🇺🇸
Matthew Ping
2026-09-05 10:45:01
(6 hours ago)
Excessive connections (DDoS/flood) blocked by CSF CT_LIMIT on dedicated.
DDoS Attack
Brute-Force
🇫🇷
a.mohamed.go
2026-09-05 08:54:47
(8 hours ago)
136.117.214.122 - - [05/Sep/2026:08:54:46 +0000] "GET /@fs/etc/passwd?import&raw?? HTTP/1.1" 200 100 ...
show more
136.117.214.122 - - [05/Sep/2026:08:54:46 +0000] "GET /@fs/etc/passwd?import&raw?? HTTP/1.1" 200 10095 "-" "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.5880.170 Mobile Safari/537.36; compatible; Claude-User/1.0; +https://www.anthropic.com/claude-user"
...
show less
Hacking
Web App Attack
🇧🇾
lns.bz
2026-09-05 08:50:32
(8 hours ago)
.env scanning [BY]
Web App Attack
Anonymous
2026-09-05 08:31:11
(8 hours ago)
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.117.214.122 (US/United States/122.214.11 ...
show more
(config_exploit_scan) Configuratie Scanner / Nep GPTBot 136.117.214.122 (US/United States/122.214.117.136.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 136.117.214.122 - - [05/Sep/2026:10:31:06 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 406 991 "-" "Mozilla/5.0 (compatible; Twitterbot/1.0)"
136.117.214.122 - - [05/Sep/2026:10:31:06 +0200] "GET /.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.7805.146 Safari/537.36; compatible; Bytespider; +https://zhanzhang.toutiao.com/"
136.117.214.122 - - [05/Sep/2026:10:31:06 +0200] "GET /static../.env HTTP/1.1" 406 991 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.7738.167 Safari/537.36 Edg/134.0.7738.167; compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
Port Scan
🇧🇪
cmbplf
2026-09-05 04:33:07
(12 hours ago)
116 requests with url.path *.aws/*
Brute-Force
Bad Web Bot
🇫🇮
Shaik Sai Meera
2026-09-04 23:50:07
(17 hours ago)
IM360 WAF: Hidden file access
Brute-Force
🇫🇷
Nodie
2026-09-04 16:05:00
(1 day ago)
1,925 requests in 157 seconds, up to 701/min. Rotating fake crawler identities:
GET /__aws_leak_pro ...
show more
1,925 requests in 157 seconds, up to 701/min. Rotating fake crawler identities:
GET /__aws_leak_probe_995434f0__
GET /static../.aws/credentials
GET /serverless.yml.bak
show less
DDoS Attack
Bad Web Bot
Web App Attack
Hacking
🇮🇩
helouism
2026-09-04 10:44:07
(1 day ago)
Fail2Ban: Blocked by UFW for port scanning.
Port Scan
🇮🇹
CoreTech srl
2026-09-04 04:43:01
(1 day ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇬🇧
rooster
2026-09-04 01:11:30
(1 day ago)
[04/Sep/2026:02:11:29 +0100] 404 - GET http 141.147.73.25 "/__aws_leak_probe_86db577c__" [Client 136 ...
show more
[04/Sep/2026:02:11:29 +0100] 404 - GET http 141.147.73.25 "/__aws_leak_probe_86db577c__" [Client 136.117.214.122] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; TelegramBot/1.0)" "-"
[04/Sep/2026:02:11:29 +0100] 404 - GET http 141.147.73.25 "/static../.env" [Client 136.117.214.122] [Length 183] [Gzip 3.21] "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot) Chrome/122.0.4158.77 Mobile Safari/537.36" "-"
[04/Sep/2026:02:11:29 +0100] 404 - GET http 141.147.73.25 "/.git-credentials" [Client 136.117.214.122] [Length 122] [Gzip 1.35] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot" "-"
[04/Sep/2026:02:11:29 +0100] 404 - GET http 141.147.73.25 "/@fs/proc/1/environ?raw??" [Client 136.117.214.122] [Length 122] [Gzip 1.35] "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:149.16) Gecko/2010010
...
show less
Hacking
Web App Attack
🇫🇮
pixiekat
2026-09-04 01:02:18
(1 day ago)
[Fri Sep 04 02:02:17.565433 2026] [authz_core:error] [pid 965304:tid 965417] [client 136.117.214.122 ...
show more
[Fri Sep 04 02:02:17.565433 2026] [authz_core:error] [pid 965304:tid 965417] [client 136.117.214.122:14792] AH01630: client denied by server configuration: /var/www/html/
[Fri Sep 04 02:02:17.742140 2026] [authz_core:error] [pid 965304:tid 965386] [client 136.117.214.122:14792] AH01630: client denied by server configuration: /var/www/html/__aws_leak_probe_76ca111d__
[Fri Sep 04 02:02:17.922997 2026] [authz_core:error] [pid 965304:tid 965419] [client 136.117.214.122:14792] AH01630: client denied by server configuration: /var/www/html/static..
[Fri Sep 04 02:02:18.105700 2026] [authz_core:error] [pid 965304:tid 965391] [client 136.117.214.122:14792] AH01630: client denied by server configuration: /var/www/html/media..
[Fri Sep 04 02:02:18.275403 2026] [authz_core:error] [pid 965304:tid 965382] [client 136.117.214.122:14804] AH01630: client denied by server configuration: /var/www/html/@fs
...
show less
Brute-Force
Anonymous
2026-09-04 00:59:20
(1 day ago)
Aggressive web scan
Web App Attack