Anonymous
2026-10-26 05:45:33
(3 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 13:42:41
(19 hours ago)
[ti-14al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 4 suspicious requests detected by fail2ban jail <name>. Example: 34.154.230.164 - - [20/Oct/2026:01:29:36 +0200] "GET /.git/config HTTP/1.1" 404 646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.230.164 - - [20/Oct/2026:01:29:36 +0200] "GET /.env HTTP/1.1" 404 646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.230.164 - - [20/Oct/2026:01:29:36 +0200] "GET /.env.local HTTP/1.1" 404 646 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.230.164 - - [20/Oct/2026:01:29:36 +0200] "GET /.env.production HTTP/1.1" 404 646 "-" "Mozilla/
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
Nodez3r0
2026-10-24 14:49:46
(1 day ago)
CrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /administrator/.env); first seen 2026 ...
show more
CrowdSec ban: crowdsecurity/http-admin-interface-probing (e.g. /administrator/.env); first seen 2026-10-24T14:49:46Z, last seen 2026-10-24T14:49:46Z; reported by WOPR honeypot nedry.wopr.systems
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-10-24 13:21:49
(1 day ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-24 13:01:45
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฉ๐ช
svr
2026-10-24 12:00:18
(1 day ago)
HC-Flood Web Scanner
Web App Attack
๐ณ๐ฑ
melroy89
2026-10-24 11:10:25
(1 day ago)
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh ...
show more
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.001
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.000
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.000
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "buy.melroy.org" 0.020
34.154.230.164 - - [24/Oct/2026:13:10:02 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X
...
show less
Web App Attack
๐ณ๐ฑ
ams_sec_user
2026-10-24 11:05:27
(1 day ago)
Automated requests against a hosted website: 226 requests between 10:00 and 10:59 UTC; 209 probes fo ...
show more
Automated requests against a hosted website: 226 requests between 10:00 and 10:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
show less
Hacking
Bad Web Bot
Web App Attack
๐ธ๐ช
Esko
2026-10-24 06:16:56
(2 days ago)
34.154.230.164 - - [24/Oct/2026:06:16:56 +0000] "GET /.git/config HTTP/1.1" 488 0 "-" "Mozilla/5.0 ( ...
show more
34.154.230.164 - - [24/Oct/2026:06:16:56 +0000] "GET /.git/config HTTP/1.1" 488 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
Anonymous
2026-10-24 04:23:50
(2 days ago)
34.154.230.164 - - [24/Oct/2026:06:23:50 +0200] "GET /.git/config HTTP/1.1" 404 522 "-" "Mozilla/5.0 ...
show more
34.154.230.164 - - [24/Oct/2026:06:23:50 +0200] "GET /.git/config HTTP/1.1" 404 522 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-24 02:21:17
(2 days ago)
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-07al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.230.164 - - [24/Oct/2026:04:21:02 +0200] "GET /.git/config HTTP/1.1" 404 31737 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-23 23:45:02
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
LRob
2026-10-23 20:16:54
(2 days ago)
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+10 more) | ua: Mozilla/5. ...
show more
Secret file probe | method: GET | path: /.git/config, /.env, /.env.local (+10 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
Lee Daniel
2026-10-23 19:55:19
(2 days ago)
34.154.230.164 - - [23/Oct/2026:15:55:19 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Macin ...
show more
34.154.230.164 - - [23/Oct/2026:15:55:19 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-23 19:04:24
(2 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack