π©πͺ
jasperedv.de
2026-09-30 18:36:22
(3 days ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
π©πͺ
FeG Deutschland
2026-09-30 18:28:55
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
π©πͺ
ger-stg-sifi1
2026-09-30 17:53:53
(4 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
π³π±
Savvii
2026-09-30 17:53:43
(4 days ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
raph
2026-09-30 17:33:04
(4 days ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
π©πͺ
Hazzard
2026-09-30 16:58:37
(4 days ago)
(PERMBLOCK) 207.175.13.35 (BE/Belgium/Brussels Capital/Brussels/35.13.175.207.bc.googleusercontent.c ...
show more
(PERMBLOCK) 207.175.13.35 (BE/Belgium/Brussels Capital/Brussels/35.13.175.207.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
π©πͺ
dbmwebdesign
2026-09-30 16:15:03
(4 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
π©πͺ
Manuel Braeuer
2026-09-30 16:08:09
(4 days ago)
207.175.13.35 - - [30/Sep/2026:18:08:08 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 146 "-" "Mozill ...
show more
207.175.13.35 - - [30/Sep/2026:18:08:08 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
207.175.13.35 - - [30/Sep/2026:18:08:09 +0200] "GET /wp-config.php.old HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
207.175.13.35 - - [30/Sep/2026:18:08:09 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 146 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
207.175.13.35 - - [30/Sep/2026:18:08:09 +0200] "GET /auth.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
207.175.13.35 - - [30/Sep/2026:18:08:09 +0200] "GET /.env.swp HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Web App Attack
π©πͺ
Nightreaver
2026-09-30 15:02:50
(4 days ago)
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /manifest.json HTTP/1.1" 404 5724 "-" "Mozilla/5 ...
show more
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /manifest.json HTTP/1.1" 404 5724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /assets/manifest.json HTTP/1.1" 404 5724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /static/manifest.json HTTP/1.1" 404 5724 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /z9x8c7v6b5-debug-trigger-community.[snip] HTTP/1.1" 404 5724 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
207.175.13.35 - - [30/Sep/2026:17:02:50 0200] "GET /snlvhz340x30j5r4ggg1 HTTP/1.1" 404 5724 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; https://x.ai/)"[...]
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-30 14:56:02
(4 days ago)
[Wed Sep 30 16:56:00.509237 2026] [proxy_fcgi:error] [pid 53502:tid 53535] [client 207.175.13.35:513 ...
show more
[Wed Sep 30 16:56:00.509237 2026] [proxy_fcgi:error] [pid 53502:tid 53535] [client 207.175.13.35:51320] AH01071: Got error 'Primary script unknown'
[Wed Sep 30 16:56:00.871111 2026] [proxy_fcgi:error] [pid 8826:tid 8961] [client 207.175.13.35:51318] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
π©πͺ
arnisolutions
2026-09-30 14:41:52
(4 days ago)
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production s ...
show more
Vulnerability scanning (requests for admin panels, shells, backup files etc.) against a production server. Observed on 1 day(s) between 2026-09-30 and 2026-09-30 (UTC). 1 further address(es) from the same network showed abusive behaviour. Sample request: POST /exec-py HTTP/2.0
show less
Web App Attack
Hacking
π«π·
sthoyer.de
2026-09-30 13:21:39
(4 days ago)
207.175.13.35 - - [30/Sep/2026:15:21:37 +0200] "GET /secure HTTP/2" 302 495 "-" "Mozilla/5.0 (Macint ...
show more
207.175.13.35 - - [30/Sep/2026:15:21:37 +0200] "GET /secure HTTP/2" 302 495 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
207.175.13.35 - - [30/Sep/2026:15:21:37 +0200] "GET /6u7dm9nnbbl5gwf9i1zu HTTP/2" 302 495 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
Anonymous
2026-09-30 13:16:59
(4 days ago)
[Wed Sep 30 14:16:58.054913 2026] [proxy_fcgi:error] [pid 8826:tid 8956] [client 207.175.13.35:41200 ...
show more
[Wed Sep 30 14:16:58.054913 2026] [proxy_fcgi:error] [pid 8826:tid 8956] [client 207.175.13.35:41200] AH01071: Got error 'Primary script unknown'
[Wed Sep 30 15:16:58.204236 2026] [proxy_fcgi:error] [pid 8715:tid 8783] [client 207.175.13.35:54862] AH01071: Got error 'Primary script unknown'
[Wed Sep 30 15:16:58.285631 2026] [proxy_fcgi:error] [pid 8715:tid 8810] [client 207.175.13.35:54862] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
π©πͺ
MaxMeier
2026-09-30 13:13:33
(4 days ago)
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /.htpasswd HTTP/1.1" 400 230 "-" "Mozilla/5.0 (c ...
show more
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /.htpasswd HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 400 230 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /@fs/app/.env?raw?? HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /@fs/../.env?raw?? HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 400 230 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
207.175.13.35 - - [30/Sep/2026:15:13:26 +0200] "GET
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-30 12:57:25
(4 days ago)
207.175.13.35 - - [30/Sep/2026:14:57:16 +0200] "GET /z9x8c7v6b5-debug-trigger-www.soc-info.de HTTP/2 ...
show more
207.175.13.35 - - [30/Sep/2026:14:57:16 +0200] "GET /z9x8c7v6b5-debug-trigger-www.soc-info.de HTTP/2.0" 403 272 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack