🇮🇹
ciccio diddo
2026-09-20 15:41:21
(25 minutes ago)
URL Scanner multiple 30X port:Tcp/80,443
Brute-Force
Web App Attack
🇩🇪
Nevermind
2026-09-20 15:34:17
(32 minutes ago)
207.175.155.87 - - [20/Sep/2026:17:34:16 +0200] "GET /wp-json HTTP/1.1" 404 5661 "-" "Mozilla/5.0 (c ...
show more
207.175.155.87 - - [20/Sep/2026:17:34:16 +0200] "GET /wp-json HTTP/1.1" 404 5661 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
207.175.155.87 - - [20/Sep/2026:17:34:16 +0200] "GET /.env.development HTTP/1.1" 403 5664 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
207.175.155.87 - - [20/Sep/2026:17:34:16 +0200] "GET /.env.staging HTTP/1.1" 403 5664 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
207.175.155.87 - - [20/Sep/2026:17:34:16 +0200] "GET /.env.test HTTP/1.1" 403 5664 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
...
show less
Web App Attack
2026-09-20 15:09:36
(57 minutes ago)
Blocked by fail2ban on a public web server.
Web App Attack
🇳🇱
Savvii
2026-09-20 14:19:32
(1 hour ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-09-20 14:18:47
(1 hour ago)
HTTP vulnerability scanning
Web App Attack
🇩🇪
Lino Project
2026-09-20 14:11:25
(1 hour ago)
207.175.155.87 - - [20/Sep/2026:16:11:22 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 23 "-" "Mozil ...
show more
207.175.155.87 - - [20/Sep/2026:16:11:22 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 403 23 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-09-20 13:52:06
(2 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 207.175.155.87 (BE/Belgium/87.155.175.20 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 207.175.155.87 (BE/Belgium/87.155.175.207.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 207.175.155.87 - - [20/Sep/2026:15:52:05 +0200] "GET /.aws/credentials HTTP/2.0" 429 41 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "207.175.155.87" host=masterlabvideoproduzioni.it
show less
Port Scan
🇩🇪
www.mammazone.it
2026-09-20 13:46:28
(2 hours ago)
[Sun Sep 20 15:46:26.065008 2026] [access_compat:error] [pid 3894349] [client 207.175.155.87:39730] ...
show more
[Sun Sep 20 15:46:26.065008 2026] [access_compat:error] [pid 3894349] [client 207.175.155.87:39730] AH01797: client denied by server configuration: /var/www/mammazone.it/rclone.conf
[Sun Sep 20 15:46:28.261331 2026] [core:error] [pid 3894327] [client 207.175.155.87:39716] AH10244: invalid URI path (/public/plugins/alertlist/../../../../../../../../proc/self/environ)
...
show less
Hacking
🇮🇹
madaello
2026-09-20 12:38:42
(3 hours ago)
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /.git/config HTTP/1.1" 404 94639 "https://elisa ...
show more
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /.git/config HTTP/1.1" 404 94639 "https://elisa-andrea.it/.git/config" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /z9x8c7v6b5-debug-trigger-elisa-andrea.it HTTP/1.1" 404 98708 "https://elisa-andrea.it/z9x8c7v6b5-debug-trigger-elisa-andrea.it" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /.git/HEAD HTTP/1.1" 404 94633 "https://elisa-andrea.it/.git/HEAD" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /.git-credentials HTTP/1.1" 404 98623 "https://elisa-andrea.it/.git-credentials" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
207.175.155.87 - - [20/Sep/2026:14:38:39 +0200] "GET /.gitlab-ci.yml HTTP/1.1" 404 94648
...
show less
Web App Attack
🇳🇱
Site.eu
2026-09-20 12:29:22
(3 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
maxpower
2026-09-20 11:51:02
(4 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 207.175.155.87 (BE/Belgium/87.155.175.20 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 207.175.155.87 (BE/Belgium/87.155.175.207.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 207.175.155.87 - - [20/Sep/2026:13:50:57 +0200] "GET /.aws/credentials HTTP/2.0" 200 4811 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "207.175.155.87" host=brokerleader.it
show less
Port Scan
2026-09-20 11:40:11
(4 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇫🇮
paissangroup
2026-09-20 11:19:20
(4 hours ago)
Multiple WAF Violations
Web App Attack
🇮🇹
VHosting
2026-09-20 11:15:03
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-09-20 11:11:15
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack