🇸🇬
simpeg-adm.bandung.go.id
2026-11-07 12:55:03
UTC ·
(2 hours ago)
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182 ...
show more
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:01 +0000;216.194.175.182;"/login"
07/Nov/2026:12:55:02 +0000;216.194.175.182;"/admin"
...
show less
Web Spam
Brute-Force
Web App Attack
🇱🇻
radix
2026-11-07 00:09:51
UTC ·
(15 hours ago)
Automated probing for sensitive configuration files and environment leaks.
Hacking
Brute-Force
🇮🇩
helouism
2026-11-06 20:09:01
UTC ·
(19 hours ago)
Fail2Ban: Blocked by UFW for port scanning.
Port Scan
DDoS Attack
🇳🇱
Alt255
2026-11-06 16:56:18
UTC ·
(22 hours ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 216.194.175.182 - - [06/Nov/2026:17:56:14 +0100] "GET /.env HTTP/1.1" 404 6933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 216.194.175.182 - - [06/Nov/2026:17:56:14 +0100] "GET /.env HTTP/1.1" 404 6933 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Serpentex
2026-11-06 16:26:33
UTC ·
(23 hours ago)
216.194.175.182 - - [06/Nov/2026:17:26:31 +0100] "GET /..%2F.env HTTP/1.1" 400 150 "-" "-"
216.194.175.182 - - [06/Nov/2026:17:26:32 +0100] "GET /../.env HTTP/1.1" 400 150 "-" "-"
216.194.175.182 - - [06/Nov/2026:17:26:32 +0100] "GET /../.env HTTP/1. ...
show more
216.194.175.182 - - [06/Nov/2026:17:26:31 +0100] "GET /..%2F.env HTTP/1.1" 400 150 "-" "-"
216.194.175.182 - - [06/Nov/2026:17:26:32 +0100] "GET /../.env HTTP/1.1" 400 150 "-" "-"
216.194.175.182 - - [06/Nov/2026:17:26:32 +0100] "GET /../.env HTTP/1.1" 400 150 "-" "-"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-06 16:21:47
UTC ·
(23 hours ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: panel.budyn.wtf | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: panel.budyn.wtf | Path: /.env | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Safari/605.1.15 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-11-06 14:46:05
UTC ·
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: laravel_ignition_rce. Observed by 1 sensor(s); 18 hits.
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-11-06 13:14:12
UTC ·
(1 day ago)
2026/11/06 13:14:11 [error] 2607836#2607836: *1842229 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 216.194.175.182, server: kocerroxy.com, request: "GET /info.php HTTP/1.1", upstream: "fastcgi: ...
show more
2026/11/06 13:14:11 [error] 2607836#2607836: *1842229 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 216.194.175.182, server: kocerroxy.com, request: "GET /info.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
216.194.175.182 - - [06/Nov/2026:13:14:11 +0000] "GET /info.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.4 Safari/605.1.15"
2026/11/06 13:14:11 [error] 2607836#2607836: *1842229 FastCGI sent in stderr: "Primary script unknown" while reading response header from upstream, client: 216.194.175.182, server: kocerroxy.com, request: "GET /php.php HTTP/1.1", upstream: "fastcgi://unix:/var/run/php/php8.4-fpm-betakocerroxycom.sock:", host: "app.kocerroxy.com"
216.194.175.182 - - [06/Nov/2026:13:14:11 +0000] "GET /php.php HTTP/1.1" 404 47 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7)
...
show less
Web App Attack
🇮🇩
IndoAbuse
2026-11-06 10:39:57
UTC ·
(1 day ago)
Wordfence 503 block: Repeated malicious requests and bot attacks blocked by WAF.
Brute-Force
Web App Attack
🇵🇱
miriks
2026-11-06 09:00:28
UTC ·
(1 day ago)
Automated scan detected: GET /admin — UA: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0
Port Scan
Web App Attack
🇸🇪
vaia.cloud
2026-11-06 03:40:02
UTC ·
(1 day ago)
crowdsecurity/http-cve-probing
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-11-06 02:20:03
UTC ·
(1 day ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
kosada.com
2026-11-06 02:02:28
UTC ·
(1 day ago)
Repeated requests for suspicious nonexistent URLs, for example: /signin (HTTP port 443, user agent: "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:125.0) Gecko/20100101 Firefox/125.0")
Web App Attack
🇦🇪
CG
2026-11-05 23:02:53
UTC ·
(1 day ago)
Web application attack, Automated scan
Web App Attack
Hacking
SQL Injection
🇮🇹
mgarofano80
2026-11-05 21:14:59
UTC ·
(1 day ago)
Brute-Force
Web App Attack