🇺🇸
Penny Packer
2026-10-13 07:37:18
(1 day ago)
Fail2Ban apache-tripwires
Web App Attack
🇳🇱
Alt255
2026-10-13 07:35:22
(1 day ago)
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.211.112.195 - - [13/Oct/2026:09:35:09 +0200] "GET /administrator/manifests/files/joomla.xml HTTP/2.0" 301 376 "-" "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-10-13 07:25:08
(1 day ago)
Web App Attack
🇺🇸
mnsf
2026-10-13 07:05:16
(1 day ago)
Too many Status 40X (11)
Brute-Force
Web App Attack
🇺🇸
xxkodedxx
2026-10-13 07:03:55
(1 day ago)
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 5× edge-block ...
show more
[Zorvexus edge-defense] GET .env / WordPress honeypot probe
Trigger: 1× honeypot-get, 5× edge-block in 10m window.
Origin: US / AS16509 Amazon.com, Inc.
Active: 07:03:26→07:03:36 UTC
Volume: 20 HTTP req, 11 honeypot probe(s)
Bait taken: /core/.env, /.env.save, /.env.example, /.env.old, /.env.bak
Status mix: 404×14 444×5 200×1
Vhost fishing: invalid.invalid
UA: "MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)"
Auto-banned 30d. zorvexus-banner.
show less
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-10-13 07:03:45
(1 day ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 07:00:37
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.211.112.195 (ec2-34-211-112-195.us-west-2.co ...
show more
(mod_security) mod_security (id:210730) triggered by 34.211.112.195 (ec2-34-211-112-195.us-west-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 03:00:31.118306 2026] [security2:error] [pid 20210:tid 20210] [client 34.211.112.195:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.portfoliolighting.net|F|2"] [data ".log"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.portfoliolighting.net"] [uri "/debug.log"] [unique_id "as3XDycWnS6m692JeLODtAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-13 06:44:57
(1 day ago)
Technology fingerprinting | method: GET | path: /core/install.php | ua: MerchantSecurityScanner/1.0 ...
show more
Technology fingerprinting | method: GET | path: /core/install.php | ua: MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner)
show less
Port Scan
Web App Attack
🇧🇪
cmbplf
2026-10-13 06:40:32
(1 day ago)
101 requests with url.path *config.yaml
Brute-Force
Bad Web Bot
🇺🇸
ruusvuu
2026-10-13 06:30:40
(1 day ago)
Automated abuse report: 25 attack/probe requests from Amazon.com, Inc. / US.
Targeted paths: /docker ...
show more
Automated abuse report: 25 attack/probe requests from Amazon.com, Inc. / US.
Targeted paths: /docker-compose.yml, /docker-compose.yaml, /docker-compose.prod.yml, /docker-compose.production.yml.
Sample log lines:
[readingpub] 2026-10-12T23:30:38: PXV 2026-10-13T06:30:38.904Z 34.211.112.195 GET /docker-compose.prod.yml 404 - MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner) pv=0
[readingpub] 2026-10-12T23:30:38: PXV 2026-10-13T06:30:38.904Z 34.211.112.195 GET /docker-compose.prod.yml 404 - MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner) pv=0
[readingpub] 2026-10-12T23:30:39: PXV 2026-10-13T06:30:39.028Z 34.211.112.195 GET /docker-compose.production.yml 404 - MerchantSecurityScanner/1.0 (+https://stri.pe/go/merchant-security-scanner) pv=0
Detected by an automated web-server log monitor.
show less
Web App Attack
2022-11-03 13:14:53
(3 years ago)
$f2bV_matches
Brute-Force
2022-06-15 12:46:28
(4 years ago)
$f2bV_matches
Brute-Force
2022-05-17 18:32:15
(4 years ago)
$f2bV_matches
Brute-Force
