๐ฉ๐ช
Marc
2026-09-25 04:48:04
(2 hours ago)
207.175.213.233 - - [25/Sep/2026:06:48:04 +0200] "GET /j7amn3myr8pe1z9m2p9w HTTP/2.0" 404 314 "-" "M ...
show more
207.175.213.233 - - [25/Sep/2026:06:48:04 +0200] "GET /j7amn3myr8pe1z9m2p9w HTTP/2.0" 404 314 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 207.175.213.233 - - [25/Sep/2026:06:48:04 +0200] "GET /z9x8c7v6b5-debug-trigger-clients.tin-whistle.de HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" 207.175.213.233 - - [25/Sep/2026:06:48:04 +0200] "GET /users/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
show less
Brute-Force
๐ฉ๐ช
SiyCah
2026-09-25 03:00:03
(4 hours ago)
IP banned by fail2ban; banned in jail apache-modsecurity. Report generated by fail2abuseipdb.
Hacking
Brute-Force
Web App Attack
๐ฉ๐ช
Philister11
2026-09-25 01:24:24
(6 hours ago)
CrowdSec: crowdsecurity/grafana-cve-2021-43798 (US/AS396982)
Web App Attack
Hacking
๐บ๐ธ
copyyy
2026-09-24 16:03:47
(15 hours ago)
Repeated attempts to retrieve environment/configuration files.
Evidence (UTC):
2026-09-24T16:03:46.3 ...
show more
Repeated attempts to retrieve environment/configuration files.
Evidence (UTC):
2026-09-24T16:03:46.352360Z path=/push_config.json
show less
Web App Attack
๐ฉ๐ช
Manuel Braeuer
2026-09-24 15:21:42
(16 hours ago)
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 10 ...
show more
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /wp-config.php.old HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
207.175.213.233 - - [24/Sep/2026:17:21:41 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
...
show less
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-24 14:57:09
(16 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-24 06:00:03
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฉ๐ช
Manuel Braeuer
2026-09-24 05:27:12
(1 day ago)
207.175.213.233 - - [24/Sep/2026:07:27:10 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "-" "Mozilla/5.0 ...
show more
207.175.213.233 - - [24/Sep/2026:07:27:10 +0200] "GET /.htpasswd HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
207.175.213.233 - - [24/Sep/2026:07:27:11 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
207.175.213.233 - - [24/Sep/2026:07:27:11 +0200] "GET /wp-config.php.bak HTTP/2.0" 403 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
207.175.213.233 - - [24/Sep/2026:07:27:11 +0200] "GET /wp-config.php.old HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
207.175.213.233 - - [24/Sep/2026:07:27:11 +0200] "GET /wp-config.php~ HTTP/2.0" 403 106 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
show less
Web App Attack
Anonymous
2026-09-24 05:19:32
(1 day ago)
Aggressive web scan
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-24 05:15:50
(1 day ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 207 ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 207.175.213.233 - - \[24/Sep/2026:07:15:34 +0200\] "GET /.env.local HTTP/2.0" 301 377 "-" "Mozilla/5.0 \(compatible\; Bytespider\; [email protected] \) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Marc
2026-09-24 04:35:17
(1 day ago)
207.175.213.233 - - [24/Sep/2026:06:35:16 +0200] "GET /signin HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Wi ...
show more
207.175.213.233 - - [24/Sep/2026:06:35:16 +0200] "GET /signin HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 207.175.213.233 - - [24/Sep/2026:06:35:16 +0200] "GET /auth HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 207.175.213.233 - - [24/Sep/2026:06:35:16 +0200] "GET /cvoadwm325uftb4h4cr6 HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
show less
Brute-Force
๐ฉ๐ช
itsolon
2026-09-24 04:13:28
(1 day ago)
[24/Sep/2026:06:13:26 +0200] 179022320610.655093 207.175.213.233 38188 217.154.7.177 443
[24/Sep/202 ...
show more
[24/Sep/2026:06:13:26 +0200] 179022320610.655093 207.175.213.233 38188 217.154.7.177 443
[24/Sep/2026:06:13:26 +0200] 179022320658.116265 207.175.213.233 38188 217.154.7.177 443
[24/Sep/2026:06:13:27 +0200] 179022320715.798347 207.175.213.233 38188 217.154.7.177 443
[24/Sep/2026:06:13:27 +0200] 179022320773.042287 207.175.213.233 38188 217.154.7.177 443
[24/Sep/2026:06:13:27 +0200] 179022320785.218051 207.175.213.233 38188 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-24 04:01:20
(1 day ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Little Iguana
2026-09-24 03:49:27
(1 day ago)
Attempt to hack Wordpress Login, XMLRPC or other login
Hacking
๐ณ๐ฑ
Savvii
2026-09-24 03:25:53
(1 day ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack