๐ฉ๐ช
klaus_ph
2026-09-23 15:31:14
(18 hours ago)
2026-09-23 01:44:41,100 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.180.17.64
...
Bad Web Bot
Anonymous
2026-09-23 13:45:05
(20 hours ago)
Observed scanned 14 known-sensitive endpoint(s), e.g.: /, /.env, /api/v2/.env, /apps/.env, /backend/ ...
show more
Observed scanned 14 known-sensitive endpoint(s), e.g.: /, /.env, /api/v2/.env, /apps/.env, /backend/.env, /beta/phpinfo.php
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-22 18:42:52
(1 day ago)
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34 ...
show more
[topuurbd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.180.17.64 - - [22/Sep/2026:20:42:52 +0200] "GET /.git/config HTTP/1.1" 307 347 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-22 17:50:06
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ซ๐ฎ
netman
2026-09-22 17:35:46
(1 day ago)
HTTP: 34.180.17.64 blocked because of 500 failures
...
Port Scan
Web App Attack
Anonymous
2026-09-22 16:37:32
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ณ๐ฑ
Alt255
2026-09-22 16:31:37
(1 day ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.180.17.64 - - [22/Sep/2026:18:31:37 +0200] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 14:24:19
(1 day ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /.env.local
Bad Web Bot
Web App Attack
๐บ๐ธ
nasset
2026-09-22 10:00:36
(2 days ago)
34.180.17.64 - - [22/Sep/2026:03:00:34 -0700] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Wi ...
show more
34.180.17.64 - - [22/Sep/2026:03:00:34 -0700] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.17.64 - - [22/Sep/2026:03:00:35 -0700] "GET /.env.yml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.17.64 - - [22/Sep/2026:03:00:35 -0700] "GET /app/.env HTTP/1.1" 404 637 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.17.64 - - [22/Sep/2026:03:00:35 -0700] "GET /apps/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.180.17.64 - - [22/Sep/2026:03:00:35 -0700] "GET /api/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
oja
2026-09-22 08:56:42
(2 days ago)
Aggressive web scanner
Web App Attack
๐ญ๐บ
miszterx.hu
2026-09-22 07:52:14
(2 days ago)
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-22 06:41:38
(2 days ago)
Excessive multi-domain requests
Brute-Force
๐ฎ๐ณ
evicky2002
2026-09-22 06:00:01
(2 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ช๐ธ
robotstxt
2026-09-22 01:39:08
(2 days ago)
34.180.17.64 - - [22/Sep/2026:01:38:51 +0000] "POST / HTTP/1.1" 403 23936 "-" "Mozilla/5.0 (Macintos ...
show more
34.180.17.64 - - [22/Sep/2026:01:38:51 +0000] "POST / HTTP/1.1" 403 23936 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.180.17.64"
34.180.17.64 - - [22/Sep/2026:01:38:52 +0000] "POST / HTTP/1.1" 403 23936 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.180.17.64"
34.180.17.64 - - [22/Sep/2026:01:38:52 +0000] "GET /.git/config HTTP/1.1" 403 21342 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.180.17.64"
34.180.17.64 - - [22/Sep/2026:01:38:54 +0000] "GET /.env HTTP/1.1" 403 21337 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.180.17.64"
34.180.17.64 - - [22/Sep/2026:01:38:55 +0000] "GET /.env.local HTTP/1.1" 403 21353 "-" "Mozilla/5.0
...
show less
Web App Attack
๐ฆ๐บ
Klaverstyn
2026-09-22 01:04:57
(2 days ago)
Repeated 403 Forbidden responses
Web App Attack