Anonymous
2026-11-12 04:34:29
UTC ·
(2 days ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇸🇪
vaia.cloud
2026-11-11 04:40:01
UTC ·
(3 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇨🇦
internetworld
2026-11-11 01:03:30
UTC ·
(3 days ago)
internetworld-prod-01 Fail2Ban ban. Jail=nginx-web-probe-iw. Sanitized automatic report from internetworld.ca server security monitoring.
Brute-Force
Web App Attack
🇩🇪
throny
2026-11-10 22:03:11
UTC ·
(3 days ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safar ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 4 on 1 host(s)
User agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
Requested, e.g.:
- internal.[REDACTED]/
show less
Bad Web Bot
🇳🇱
Alt255
2026-11-10 16:23:10
UTC ·
(3 days ago)
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.102.1 - - [10/Nov/2026:17:23:04 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
[mx01aln] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.22.102.1 - - [10/Nov/2026:17:23:04 +0100] "GET /.git/config HTTP/1.1" 301 624 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇬🇧
matbargob
2026-11-10 14:27:59
UTC ·
(3 days ago)
CrowdSec custom/http-datacenter-abuse: 6 events 2026-11-10 14:27:59 - 14:28:01 UTC. Method: GET. Paths: /, /.git/config, /.env, /.env.local, /.env.production, /.env.staging. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.3 ...
show more
CrowdSec custom/http-datacenter-abuse: 6 events 2026-11-10 14:27:59 - 14:28:01 UTC. Method: GET. Paths: /, /.git/config, /.env, /.env.local, /.env.production, /.env.staging. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
🇺🇸
borgsquared
2026-11-10 14:19:50
UTC ·
(3 days ago)
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 7838 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 7839 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "POST / HTTP/1.1 ...
show more
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "GET / HTTP/1.1" 404 19 "-" "-" 7838 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 7839 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 7840 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "POST / HTTP/1.1" 404 19 "-" "-" 7841 "-" "-" 0ms
34.22.102.1 - - [10/Nov/2026:14:19:49 +0000] "GET /.git/config HTTP/1.1" 404 19 "-" "-" 7842 "-" "-" 0ms
...
show less
Brute-Force
Web App Attack
🇫🇷
Catalin Negru
2026-11-10 11:42:55
UTC ·
(3 days ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇺🇸
nasset
2026-11-10 10:24:47
UTC ·
(4 days ago)
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.22.102.1 - - ...
show more
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /.env.yaml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /.env.yml HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /app/.env HTTP/1.1" 404 637 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /apps/.env HTTP/1.1" 403 640 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" TLSv1.3 TLS_AES_256_GCM_SHA384
34.22.102.1 - - [10/Nov/2026:02:24:46 -0800] "GET /api/.env HTTP/1
...
show less
Bad Web Bot
Web App Attack
🇬🇧
oja
2026-11-10 09:32:17
UTC ·
(4 days ago)
Aggressive web scanner
Web App Attack
🇭🇺
miszterx.hu
2026-11-10 07:51:17
UTC ·
(4 days ago)
XORP (haproxy): 73x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇦🇺
Klaverstyn
2026-11-10 02:36:15
UTC ·
(4 days ago)
Repeated 403 Forbidden responses
Web App Attack
🇩🇪
enchiriadis
2026-11-10 02:18:51
UTC ·
(4 days ago)
Fail2Ban caddy-scan-404 on Tuxi
Port Scan
🇺🇸
[email protected]
2026-11-10 02:11:50
UTC ·
(4 days ago)
CrowdSec ban: crowdsecurity/appsec-vpatch on unknown-host (duration 4h)
Web App Attack
🇬🇧
andypiper
2026-11-10 02:00:46
UTC ·
(4 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack