๐จ๐ฆ
SSH-Admin
2026-10-21 07:39:02
(1 day ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
๐ซ๐ท
COMAITE
2026-10-21 07:28:13
(1 day ago)
Common web attack from 34.185.175.112.
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-21 00:58:17
(1 day ago)
[mx01aln] Web exploit scanning: 10 suspicious requests detected by fail2ban jail apache-scanner. Exa ...
show more
[mx01aln] Web exploit scanning: 10 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.185.175.112 - - [21/Oct/2026:02:57:55 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 403 536 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.185.175.112 - - [21/Oct/2026:02:57:55 +0200] "GET /.env?import&url&inline HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.185.175.112 - - [21/Oct/2026:02:57:55 +0200] "GET /.env?raw HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.175.112 - - [21/Oct/2026:02:57:55 +0200] "GET /.env?import&raw HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/5
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-20 19:49:16
(2 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ซ๐ท
Zundapper
2026-10-20 18:36:59
(2 days ago)
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 ...
show more
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /workspace HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /admin/login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:20:36:58 +0200] "GET /app HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
๐ณ๐ฑ
middelkoopcc
2026-10-20 16:22:01
(2 days ago)
2026-10-20 18:20:11 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ) && 20 ...
show more
2026-10-20 18:20:11 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/proc/self/environ) && 2026-10-20 18:20:11 AH10244: invalid URI path (/%2e%2e/%2e%2e/%2e%2e/%2e%2e/.env) && 2026-10-20 18:20:11 AH10244: invalid URI path (/public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ) && 227 more within 20 minutes
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 16:17:26
(2 days ago)
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.185.175.112 - - [20/Oct/2026:18:17:11 +0200] "GET /wp-content/plugins/fwdsisc/js/FWDSISC.js.map HTTP/2.0" 404 84074 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:18:17:10 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 81520 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.185.175.112 - - [20/Oct/2026:18:17:11 +0200] "GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js.map HTTP/2.0" 404 84108 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
cwytech
2026-10-20 16:10:38
(2 days ago)
Fleet-wide ban from the Ghostfleet ๐ป. Triggered by scenario: crowdsecurity/http-probing.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 15:54:09
(2 days ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-10-20 15:50:55
(2 days ago)
Aggressive web scan
Web App Attack
๐ซ๐ท
Zundapper
2026-10-20 15:45:23
(2 days ago)
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 ...
show more
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /robots.txt HTTP/2.0" 404 106 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /q6bytwthutpnoz6bw4wr HTTP/2.0" 404 106 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /account/login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /backoffice HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.185.175.112 - - [20/Oct/2026:17:45:22 +0200] "GET /users/login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
...
show less
Web App Attack
Port Scan
๐ฌ๐ง
gigatech
2026-10-20 15:45:04
(2 days ago)
Webserver Probing
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-20 15:44:44
(2 days ago)
excessive HTTP 404 errors
Bad Web Bot
Anonymous
2026-10-20 15:40:14
(2 days ago)
| Multiple common web attacks from same source ip. (multiple servers)
Web App Attack
Hacking
SQL Injection
๐ซ๐ท
dynamix
2026-10-20 15:29:59
(2 days ago)
Multiple WAF Violations
Web App Attack