🇩🇪
ghostwarriors
2026-10-21 19:22:02
(13 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-16 01:31:39
(6 days ago)
Excessive multi-domain requests
Brute-Force
🇧🇷
ICS Labs
2026-10-15 13:44:57
(6 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-15 UTC.
Brute-Force
🇸🇬
lancernz
2026-10-15 07:15:10
(1 week ago)
Auto-detected: 22 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring ...
show more
Auto-detected: 22 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring.
show less
Web App Attack
🇦🇺
paulshipley.com.au
2026-10-15 02:26:14
(1 week ago)
underconstruction.paulshipley.info:443 159.223.8.42 - - [15/Oct/2026:13:26:13 +1100] "HEAD /backup/ ...
show more
underconstruction.paulshipley.info:443 159.223.8.42 - - [15/Oct/2026:13:26:13 +1100] "HEAD /backup/ HTTP/1.1" 404 411 "http://whoson2day.com/backup/" "Mozilla/5.0 (Linux; Android 11; RMX2195) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.6099.210 Mobile Safari/537.36 OPR/75.2.3995.72468"
...
show less
Web App Attack
🇩🇪
BlueWire Hosting
2026-10-15 02:20:37
(1 week ago)
Aggressive scanning resulting into 404
Bad Web Bot
🇩🇪
SCHAPPY
2026-10-15 02:19:47
(1 week ago)
Malicious activity from IP detected: crowdsecurity/http-probing.
Web App Attack
Hacking
🇸🇬
lancernz
2026-10-15 01:15:06
(1 week ago)
Auto-detected: 29 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring ...
show more
Auto-detected: 29 hits on westernitm.co.nz within 100 log lines. Blocked by Cowork server monitoring.
show less
Web App Attack
🇳🇱
Site.eu
2026-10-15 00:58:05
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇦🇺
paulshipley.com.au
2026-10-15 00:52:02
(1 week ago)
winesbydesign.com.au:443 159.223.8.42 - - [15/Oct/2026:11:51:58 +1100] "HEAD /backup/ HTTP/1.1" 404 ...
show more
winesbydesign.com.au:443 159.223.8.42 - - [15/Oct/2026:11:51:58 +1100] "HEAD /backup/ HTTP/1.1" 404 829 "http://winesbydesign.com.au/backup/" "Mozilla/5.0 (Linux; Android 13; Pixel 7a) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.82 Mobile Safari/537.36"
...
show less
Web App Attack
🇺🇸
antlac1
2026-10-15 00:25:32
(1 week ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-10-14 23:01:32
(1 week ago)
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-24al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 159.223.8.42 - - [15/Oct/2026:01:00:37 +0200] "HEAD /site1/ HTTP/1.1" 404 439 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 17_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.5 Mobile/15E148 Safari/604.1"
159.223.8.42 - - [15/Oct/2026:01:00:38 +0200] "HEAD /us/ HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Linux; Android 11; moto g31) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.6261.96 Mobile Safari/537.36"
159.223.8.42 - - [15/Oct/2026:01:00:39 +0200] "HEAD /website/ HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.6540.18 Safari/537.36"
159.223.8.42 - - [15/Oct/2026:01:00:40 +0200] "HEAD /backup/ HTTP/1.1" 404 439 "-" "Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWeb
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Michel Wijnberg
2026-10-14 23:01:26
(1 week ago)
159.223.8.42 - - [14/Oct/2026:23:01:26 +0000] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux ...
show more
159.223.8.42 - - [14/Oct/2026:23:01:26 +0000] "HEAD /backup/ HTTP/1.1" 301 0 "-" "Mozilla/5.0 (Linux; Android 14; Samsung SM-A546B) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.6478.14 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-10-14 22:05:02
(1 week ago)
Unknown PHP script access detected by Fail2Ban
Web App Attack
🇺🇸
Operator873
2026-10-14 21:58:47
(1 week ago)
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, serv ...
show more
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, server: [OBFUSCATED], request: "HEAD /de/ HTTP/1.1", host: "[OBFUSCATED]"
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, server: [OBFUSCATED], request: "HEAD /de/ HTTP/1.1", host: "[OBFUSCATED]"
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, server: [OBFUSCATED], request: "HEAD /site1/ HTTP/1.1", host: "[OBFUSCATED]"
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, server: [OBFUSCATED], request: "HEAD /site1/ HTTP/1.1", host: "[OBFUSCATED]"
2026/10/14 16:58:43 [error] 2027396#0: *1584624 access forbidden by rule, client: 159.223.8.42, server: [OBFUSCATED], request: "HEAD /us/ HTTP/1.1", host: "[OBFUSCATED]"
...
show less
Brute-Force
Web App Attack