🇬🇧
myintarweb
2025-08-04 13:27:08
UTC ·
(1 year ago)
161.35.194.89 - - [19/Jun/2025:08:57:36 +0100] 80 "\x16\x03\x01" 400 1467 "-" "-"
...
Hacking
Bad Web Bot
Web App Attack
🇧🇷
SOC-BR
2025-06-21 07:17:19
UTC ·
(1 year ago)
Attack detected by Fortinet - backdoor: SystemBC.Botnet - 2025-06-20 11:52:14 - Source Port 34350
Port Scan
Hacking
🇫🇷
Pythagus
2025-06-21 00:07:23
UTC ·
(1 year ago)
Aggressive web scan
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
netllama
2025-06-20 16:56:49
UTC ·
(1 year ago)
[Fri Jun 20 09:56:45.784514 2025] [proxy_fcgi:error] [pid 2294167:tid 2294298] [client 161.35.194.89:33446] AH01071: Got error 'Primary script unknown'
[Fri Jun 20 09:56:47.579002 2025] [proxy_fcgi:error] [pid 2294167:tid 2294330] [client 161.35.194. ...
show more
[Fri Jun 20 09:56:45.784514 2025] [proxy_fcgi:error] [pid 2294167:tid 2294298] [client 161.35.194.89:33446] AH01071: Got error 'Primary script unknown'
[Fri Jun 20 09:56:47.579002 2025] [proxy_fcgi:error] [pid 2294167:tid 2294330] [client 161.35.194.89:33502] AH01071: Got error 'Primary script unknown'
...
show less
Hacking
Web App Attack
🇩🇪
jasperedv.de
2025-06-20 11:15:41
UTC ·
(1 year ago)
Apache Login - Brutforcing
Brute-Force
Web App Attack
🇸🇪
SkyDancer
2025-06-20 10:52:14
UTC ·
(1 year ago)
Multiple login attempts via RDP and/or SSH using wrong credentials. Attack automatically blocked by SkyDancer Ai. EXT-SYS-5
Hacking
Brute-Force
SSH
🇷🇺
6o6ep
2025-06-20 07:20:31
UTC ·
(1 year ago)
direct access by ip: GET /geoip/ HTTP/1.1
Port Scan
Hacking
Web App Attack
🇬🇧
rakkor
2025-06-20 05:53:12
UTC ·
(1 year ago)
2025/06/20 06:53:10 [error] 10830#10830: *2449343 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 161.35.194.89, server: , request: "GET /password.php HTTP/1.1", upstream: "fastcgi://unix:/run/php ...
show more
2025/06/20 06:53:10 [error] 10830#10830: *2449343 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 161.35.194.89, server: , request: "GET /password.php HTTP/1.1", upstream: "fastcgi://unix:/run/php-fpm/php-925b669d-80ec-41dd-b8c8-bf5a26d831bf.sock:", host: "86.18.121.28"
...
show less
Hacking
Brute-Force
🇫🇷
N3ilawx
2025-06-20 05:41:38
UTC ·
(1 year ago)
Fail2Ban detect something wrong with this ip 161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - - - 400 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/ ...
show more
Fail2Ban detect something wrong with this ip 161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - - - 400 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - - - 400 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - - - 400 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
161.35.194.89 - GET - 444 - [20/Jun/2025:05:41:37 +0000]
...
show less
Brute-Force
Web App Attack
🇬🇷
ggb_st
2025-06-20 03:44:55
UTC ·
(1 year ago)
[Fri Jun 20 06:44:54.818898 2025] [php:error] [pid 442514:tid 442514] [client 161.35.194.89:58808] script '/home/gogo/mounts/VSCODE_SRV_HDD/WEBSITE_ROOT/DOCROOT/unsecure/password.php' not found or unable to stat
...
Web App Attack
🇸🇪
webbfabriken
2025-06-20 02:39:01
UTC ·
(1 year ago)
spam or other hacking activities reported by webbfabriken security servers
Attack reported by Webbfabriken Security API - WFSecAPI
Web Spam
🇨🇭
flaus
2025-06-20 00:35:14
UTC ·
(1 year ago)
$f2bV_matches
Hacking
Bad Web Bot
Web App Attack
🇧🇷
vfAcceloReporter
2025-06-19 22:19:50
UTC ·
(1 year ago)
161.35.194.89 - - [19/Jun/2025:19:19:45 -0300] "GET /t4 HTTP/1.1" 404 125 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:19:19:47 -0300] "GET /upl.php HTTP/1.1" 404 125 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:19:19:47 -0300] "GET /favicon. ...
show more
161.35.194.89 - - [19/Jun/2025:19:19:45 -0300] "GET /t4 HTTP/1.1" 404 125 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:19:19:47 -0300] "GET /upl.php HTTP/1.1" 404 125 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:19:19:47 -0300] "GET /favicon.ico HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:19:19:48 -0300] "GET /1.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:19:19:48 -0300] "GET /systembc/password.php HTTP/1.1" 404 188 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
...
show less
Brute-Force
Exploited Host
Web App Attack
🇵🇱
UMP-PL
2025-06-19 22:11:02
UTC ·
(1 year ago)
161.35.194.89 - - [20/Jun/2025:00:11:02 +0200] "GET /password.php HTTP/1.1" 500 806 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebK
...
Web App Attack
🇩🇪
Nightreaver
2025-06-19 18:32:03
UTC ·
(1 year ago)
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /geoip/ HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /p ...
show more
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /geoip/ HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /password.php HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /form.html HTTP/1.1" 404 438 "-" "curl/8.1.2"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /t4 HTTP/1.1" 404 438 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /upl.php HTTP/1.1" 404 438 "-" "Mozilla/5.0"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /favicon.ico HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36"
161.35.194.89 - - [19/Jun/2025:20:32:02 0200] "GET /1.php HTTP/1.1" 404 438 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWe[...]
show less
Bad Web Bot
Web App Attack