🇺🇸
TtlPst
2026-10-27 20:45:02
(1 day ago)
Automated web app probing / vulnerability scanning. Attacker cycled through multiple unauthorized paths looking for vulnerabilities in .json files and others
Web App Attack
Bad Web Bot
🇳🇱
Roderic
2026-10-26 13:19:41
(2 days ago)
(apache-scanners) Failed apache-scanners trigger with match [redacted])
Port Scan
🇳🇱
e.fierstra
2026-10-26 12:41:16
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
🇺🇸
interbiznw.com
2026-10-26 03:05:15
(2 days ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇩🇪
big-cloud.nl
2026-10-26 02:53:51
(2 days ago)
Try to access /.env.development?import&raw
Web App Attack
🇨🇭
dimitar Penkov
2026-10-25 20:00:35
(3 days ago)
DDOS flood attempts
Brute-Force
Exploited Host
🇺🇸
Major Hostility
2026-10-25 19:03:57
(3 days ago)
"GET /robots.txt HTTP/1.1" 404
"GET /sitemap.xml HTTP/1.1" 404
"GET /sitemap_index.xml HTTP/1.1" 404
"GET /uarwifv6y1bczky058rv HTTP/1.1" 404
"GET /asset-manifest.json HTTP/1.1" 404
"GET /assets/manifest.json HTTP/1.1" 404
"GET /app HTTP/1.1" 404
"GE ...
show more
"GET /robots.txt HTTP/1.1" 404
"GET /sitemap.xml HTTP/1.1" 404
"GET /sitemap_index.xml HTTP/1.1" 404
"GET /uarwifv6y1bczky058rv HTTP/1.1" 404
"GET /asset-manifest.json HTTP/1.1" 404
"GET /assets/manifest.json HTTP/1.1" 404
"GET /app HTTP/1.1" 404
"GET /static/manifest.json HTTP/1.1" 404
"GET /webpack-stats.json HTTP/1.1" 404
"GET /dashboard HTTP/1.1" 404
"GET /manifest.json HTTP/1.1" 404
"GET /portal HTTP/1.1" 404
"GET /dist/manifest.json HTTP/1.1" 404
"GET /users/login HTTP/1.1" 404
"GET /account HTTP/1.1" 404
"GET /z9x8c7v6b5-debug-trigger-[DOMAIN].com HTTP/1.1" 404
"GET /account/login HTTP/1.1" 404
"GET /user/login HTTP/1.1" 404
"GET /login HTTP/1.1" 404
"GET /sd
show less
Web App Attack
🇳🇱
Site.eu
2026-10-25 18:53:45
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
security.rdmc.fr
2026-10-25 17:51:04
(3 days ago)
Web App Attack
Web App Attack
🇫🇷
dynamix
2026-10-25 16:59:51
(3 days ago)
Multiple WAF Violations
Web App Attack
🇩🇪
FD-IX
2026-10-25 16:58:50
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-24 06:08:35
(4 days ago)
{"level":"info","ts":1792822114.7742019,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.178.234.160","remote_port":"36696","client_ip":"34.178.234.160","proto":"HTTP/2.0","method":"GET","host":"status.mrman.com","ur ...
show more
{"level":"info","ts":1792822114.7742019,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.178.234.160","remote_port":"36696","client_ip":"34.178.234.160","proto":"HTTP/2.0","method":"GET","host":"status.mrman.com","uri":"/.gitlab-ci.yml","headers":{"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"],"Accept":["*/*"],"Cookie":["REDACTED"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.mrman.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000795698,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1792822114.7745697,"logger":"
...
show less
DDoS Attack
Web App Attack
🇳🇱
Site.eu
2026-10-23 16:37:21
(5 days ago)
Excessive 404/403 errors
Brute-Force
🇧🇪
cmbplf
2026-10-23 16:28:35
(5 days ago)
6.140 requests with url.path *.env
1.316 requests with url.path */@fs/*
482 requests with url.path */proc/*
394 requests with url.path *.ssh/*
288 requests with url.path *config.json
250 requests with url.path *.aws/*
243 requests with url.pat ...
show more
6.140 requests with url.path *.env
1.316 requests with url.path */@fs/*
482 requests with url.path */proc/*
394 requests with url.path *.ssh/*
288 requests with url.path *config.json
250 requests with url.path *.aws/*
243 requests with url.path *credentials.json
107 requests with url.path *compose.yml
103 requests with url.path *compose.yaml
102 requests with url.path *.config/*
show less
Brute-Force
Bad Web Bot
🇮🇹
CoreTech srl
2026-10-23 16:18:57
(5 days ago)
cloudlinux2 fail2ban: 2026-10-23 18:14:15,734 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23 18:14:15cloudlinux2 fail2ban: 2026-10-23 18:14:15,757 fail2ban.filter [1633]: INFO [plesk-modsecuri ...
show more
cloudlinux2 fail2ban: 2026-10-23 18:14:15,734 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23 18:14:15cloudlinux2 fail2ban: 2026-10-23 18:14:15,757 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23 18:14:15cloudlinux2 fail2ban: 2026-10-23 18:14:15,372 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23 18:14:15cloudlinux2 fail2ban: 2026-10-23 18:14:11,720 fail2ban.filter [1633]: INFO [plesk-wordpress] Found 216.73.161.105 - 2026-10-23 18:14:10cloudlinux2 fail2ban: 2026-10-23 18:14:11,781 fail2ban.filter [1633]: INFO [plesk-wordpress] Found 216.73.161.102 - 2026-10-23 18:14:10cloudlinux2 fail2ban: 2026-10-23 18:14:15,775 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23 18:14:15cloudlinux2 fail2ban: 2026-10-23 18:14:15,804 fail2ban.filter [1633]: INFO [plesk-modsecurity] Found 34.178.234.160 - 2026-10-23
show less
Web App Attack
