🇦🇹
SchiWaGoA
2026-11-12 06:51:00
UTC ·
(14 hours ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
Anonymous
2026-11-12 04:34:47
UTC ·
(16 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇳🇱
melroy89
2026-11-12 04:01:38
UTC ·
(17 hours ago)
34.174.19.221 - - [12/Nov/2026:05:01:21 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "cryptofather.melroy.org" 0.015
34.174.19.221 - - [12/Nov/20 ...
show more
34.174.19.221 - - [12/Nov/2026:05:01:21 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "cryptofather.melroy.org" 0.015
34.174.19.221 - - [12/Nov/2026:05:01:21 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "cryptofather.melroy.org" 0.036
34.174.19.221 - - [12/Nov/2026:05:01:22 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "cryptofather.melroy.org" 0.027
34.174.19.221 - - [12/Nov/2026:05:01:22 +0100] "GET /.git/config HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "cryptofather.melroy.org" 0.001
34.174.19.221 - - [12/Nov/2026:05:01:22 +0100] "POST / HTTP/1.1" 404 0 "-" "Mozilla/5.0 (Windows NT 1
...
show less
Web App Attack
🇳🇱
Alt255
2026-11-12 00:59:21
UTC ·
(20 hours ago)
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.174.19.221 - - [12/Nov/2026:01:58:58 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (K ...
show more
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.174.19.221 - - [12/Nov/2026:01:58:58 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-12 00:52:50
UTC ·
(20 hours ago)
34.174.19.221 - - [12/Nov/2026:01:52:34 +0100] "GET /info.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:36 +0100] "GET /php.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:37 +0100] "GET /i.php HTTP/1.1" 404 29628
34.174.1 ...
show more
34.174.19.221 - - [12/Nov/2026:01:52:34 +0100] "GET /info.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:36 +0100] "GET /php.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:37 +0100] "GET /i.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:38 +0100] "GET /pi.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:39 +0100] "GET /pinfo.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:41 +0100] "GET /test.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:42 +0100] "GET /phpinfo HTTP/1.1" 404 30266
34.174.19.221 - - [12/Nov/2026:01:52:44 +0100] "GET /p.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:45 +0100] "GET /debug.php HTTP/1.1" 404 29628
34.174.19.221 - - [12/Nov/2026:01:52:47 +0100] "GET /info HTTP/1.1" 404 30266
...
show less
Web Spam
Web App Attack
Anonymous
2026-11-11 22:45:10
UTC ·
(22 hours ago)
Scan for .env Files at 2026-11-11T22:45:10+00:00
Web App Attack
🇩🇪
FD-IX
2026-11-10 03:25:47
UTC ·
(2 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-11-10 02:00:10
UTC ·
(2 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇪🇸
arturotrenard
2026-11-10 01:17:18
UTC ·
(2 days ago)
WordPress attack blocked (wp-defender): scanner-404: 16 rutas inexistentes en 10 min (hospedaje) ej. /_environment, /application_default_credentials.json, /credentials.json
Web App Attack
Anonymous
2026-11-10 01:16:48
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇳🇱
Alt255
2026-11-09 23:45:47
UTC ·
(2 days ago)
[ti-hosboov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.174.19.221 - - \[10/Nov/2026:00:45:33 +0100\] "GET /.git/config HTTP/1.1" 301 642 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/53 ...
show more
[ti-hosboov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.174.19.221 - - \[10/Nov/2026:00:45:33 +0100\] "GET /.git/config HTTP/1.1" 301 642 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-09 22:40:02
UTC ·
(2 days ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-09 22:01:10
UTC ·
(2 days ago)
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.174.19.221 - - [09/Nov/2026:23:00:57 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWeb ...
show more
[cb-01vi] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.174.19.221 - - [09/Nov/2026:23:00:57 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
H24
2026-11-09 20:12:48
UTC ·
(3 days ago)
/dev/.env /html/.env /dist/.env /htdocs/.env /www/.env /deploy/.env /build/.env /releases/.env /var/www/.env /database/.env
Web App Attack
🇨🇦
john doe
2026-11-09 19:43:47
UTC ·
(3 days ago)
SentinelBot: Secret-path hunting (5 distinct paths): Env File Hunting (score: 68)
Bad Web Bot