🇨🇱
ifiguero
2026-09-14 18:11:02
(17 hours ago)
Web Attack (\x00\x00\x00\x00\x00). 7d ban
Web App Attack
🇩🇪
Phenix Info
2026-09-14 17:38:48
(18 hours ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇺🇸
kosada.com
2026-09-14 17:14:34
(18 hours ago)
Repeated requests for suspicious nonexistent URLs, for example: /a (HTTP/1.1 port 443, bogus vhost, ...
show more
Repeated requests for suspicious nonexistent URLs, for example: /a (HTTP/1.1 port 443, bogus vhost, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36")
show less
Web App Attack
Anonymous
2026-09-13 21:58:04
(1 day ago)
Fail2Ban Log Report 193.138.195.188 - - [13/Sep/2026:23:57:58 +0200] "GET / HTTP/1.1" 444 0 "-" "Moz ...
show more
Fail2Ban Log Report 193.138.195.188 - - [13/Sep/2026:23:57:58 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" "-"
193.138.195.188 - [13/Sep/2026:23:57:58 +0200] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" "-" "-"
193.138.195.188 - 1KRJfSQj1MTnbGaPiTnuLE5J4FkDcQURe5 [13/Sep/2026:23:58:02 +0200] "POST / HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" "-"
193.138.195.188 1KRJfSQj1MTnbGaPiTnuLE5J4FkDcQURe5 [13/Sep/2026:23:58:02 +0200] "POST / HTTP/1.1" 405 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36" "-" "-"
...
show less
Hacking
Brute-Force
Web App Attack
🇺🇸
Starburst SysOp Team
2026-09-13 21:57:04
(1 day ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-iad5-2)
Hacking
Bad Web Bot
🇩🇪
AetherFox
2026-09-13 21:54:12
(1 day ago)
AetherFox VoidGuard detected: [Sun Sep 13 23:54:06.696827 2026] [authz_core:error] [pid 418172:tid 4 ...
show more
AetherFox VoidGuard detected: [Sun Sep 13 23:54:06.696827 2026] [authz_core:error] [pid 418172:tid 418214] [client 193.138.195.188:47744] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sun Sep 13 23:54:06.698633 2026] [authz_core:error] [pid 418172:tid 418214] [client 193.138.195.188:47744] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Sun Sep 13 23:54:09.426788 2026] [authz_core:error] [pid 418172:tid 418209] [client 193.138.195.188:44664] AH01630: client denied by server configuration: proxy:https://[MASKED]/
[Sun Sep 13 23:54:09.428615 2026] [authz_core:error] [pid 418172:tid 418209] [client 193.138.195.188:44664] AH01630: client denied by server configuration: /var/www/ERRORpages/403.html
[Sun Sep 13 23:54:12.057821 2026] [authz_core:error] [pid 418172:tid 418202] [client 193.138.195.188:44672] AH01630: client denied by server configuration: proxy:https://[MASKED]/
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-13 21:52:27
(1 day ago)
Reported from Nginx log analysis 16. Log: 193.138.195.188 - - [13/Sep/2026:xx:xx:xx 0200] "{\x22id\ ...
show more
Reported from Nginx log analysis 16. Log: 193.138.195.188 - - [13/Sep/2026:xx:xx:xx 0200] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe\x22, \x22params\x22: [\x22cpuminer/2.5.1\x22]}" xxx xxx "-" "-" "-" "GB United Kingdom Redditch" "AS201579" "Hostgnome Ltd"
show less
Port Scan
Brute-Force
SSH
🇮🇳
Shubham Kumar
2026-09-13 21:48:18
(1 day ago)
Repeated scrape-guard abuse (flag #1)
Bad Web Bot
🇩🇪
mr.joecat
2026-09-13 21:44:33
(1 day ago)
193.138.195.188 - - [13/Sep/2026:23:44:14 +0200] "GET /WuEL HTTP/1.1" 404 555 "-" "Mozilla/5.0 (comp ...
show more
193.138.195.188 - - [13/Sep/2026:23:44:14 +0200] "GET /WuEL HTTP/1.1" 404 555 "-" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0; ; NCLIENT50_AAPCDA5841E333)"
193.138.195.188 - - [13/Sep/2026:23:44:19 +0200] "GET /a HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"
193.138.195.188 - - [13/Sep/2026:23:44:21 +0200] "GET /download/file.ext HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"
193.138.195.188 - - [13/Sep/2026:23:44:24 +0200] "GET /SiteLoader HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"
193.138.195.188 - - [13/Sep/2026:23:44:33 +0200] "GET /mPlayer HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/94.0.4606.61 Safari/537.36"
...
show less
Web App Attack
🇺🇸
HamSammich
2026-09-13 20:49:17
(1 day ago)
Automated sensor: 3 HTTPS connection/probe attempts over the last 24h (latest 2026-09-13T20:49Z).
Brute-Force
Web App Attack
🇺🇸
Player Unknown
2026-09-13 20:19:10
(1 day ago)
193.138.195.188 - - [13/Sep/2026:13:18:42 -0700] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscri ...
show more
193.138.195.188 - - [13/Sep/2026:13:18:42 -0700] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe\x22, \x22params\x22: [\x22cpuminer/2.5.1\x22]}" 400 6593 "-" "-"
193.138.195.188 - - [13/Sep/2026:13:18:45 -0700] "{\x22id\x22: 1, \x22method\x22: \x22mining.subscribe\x22, \x22params\x22: [\x22MinerName/1.0.0\x22, \x22EthereumStratum/1.0.0\x22]}" 400 6593 "-" "-"
193.138.195.188 - - [13/Sep/2026:13:18:49 -0700] "{\x22id\x22:1,\x22method\x22:\x22eth_submitLogin\x22,\x22worker\x22:\x22igwrcvap\x22,\x22params\x22:[\x220xc8b5c1180e2db9bbe2863f0f0465d2141ecab9f1\x22,\x22x\x22],\x22jsonrpc\x22:\x222.0\x22}" 400 6593 "-" "-"
193.138.195.188 - - [13/Sep/2026:13:18:53 -0700] "{\x22id\x22:1,\x22jsonrpc\x22:\x222.0\x22,\x22method\x22:\x22login\x22,\x22params\x22:{\x22login\x22:\x2243Qe7ome177J5sKR9F1eu13PsrxYZ3sdQQ1RGSNrVvkrJBHUQBMrwEF55G4kikARfLaumkDYHuT7MCREutFNn9dbHrQEBh2\x22,\x22pass\x22:\x22x\x22,\x22agent\x22:\x22XMRig/6.15.3 (Windows NT 10.0; Win64; x64) libuv/1.42.0 msvc/2019\x22,\x22al
...
show less
Brute-Force
SSH
🇫🇷
Entalpi.net
2026-09-13 20:08:23
(1 day ago)
Repeated requests against sensitive web endpoints
Web App Attack
Anonymous
2026-09-13 18:02:17
(1 day ago)
[Sun Sep 13 20:01:28.866777 2026] [access_compat:error] [pid 137802:tid 123430045218496] [client 193 ...
show more
[Sun Sep 13 20:01:28.866777 2026] [access_compat:error] [pid 137802:tid 123430045218496] [client 193.138.195.188:42104] AH01797: client denied by server configuration: /var/www/html/
[Sun Sep 13 20:01:33.631114 2026] [access_compat:error] [pid 137803:tid 123431102174912] [client 193.138.195.188:49392] AH01797: client denied by server configuration: /var/www/html/
[Sun Sep 13 20:01:36.357664 2026] [access_compat:error] [pid 137803:tid 123431068604096] [client 193.138.195.188:49394] AH01797: client denied by server configuration: /var/www/html/
[Sun Sep 13 20:01:39.301544 2026] [access_compat:error] [pid 137802:tid 123430020040384] [client 193.138.195.188:57640] AH01797: client denied by server configuration: /var/www/html/WuEL
[Sun Sep 13 20:01:46.503032 2026] [access_compat:error] [pid 149466:tid 123430632412864] [client 193.138.195.188:57658] AH01797: client denied by server configuration: /var/www/html/a
[Sun Sep 13 20:01:49.573681 2026] [access_compat:error] [pid 137802:tid 12343110
...
show less
Brute-Force
Web App Attack
Anonymous
2026-09-13 17:36:52
(1 day ago)
tls scan
Port Scan
Anonymous
2026-09-13 17:24:23
(1 day ago)
HTTP 400 Error (Bad Request)
Web App Attack