|
Anonymous
|
|
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
|
Exploited Host
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
🇫🇷
SpaceHost-Server
|
|
|
Brute-Force
Web App Attack
|
|
Anonymous
|
|
34.28.221.210 - - [20/Sep/2026:12:01:35 -0300] "GET /.git/config HTTP/2.0" 301 162 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
|
Port Scan
Hacking
SQL Injection
Brute-Force
Bad Web Bot
Exploited Host
|
|
🇸🇪
vaia.cloud
|
|
crowdsecurity/http-admin-interface-probing
|
Brute-Force
Web App Attack
|
|
🇩🇪
macrob
|
|
2026/09/20 14:50:20 [error] 631204#631204: *18440743 access forbidden by rule, client: 34.28.221.210, server: binixo.com.br, request: "GET /deploy/.env HTTP/2.0", host: "binixo.com.br"
2026/09/20 14:50:20 [error] 631204#631204: *18440742 access forbi ...
show more
2026/09/20 14:50:20 [error] 631204#631204: *18440743 access forbidden by rule, client: 34.28.221.210, server: binixo.com.br, request: "GET /deploy/.env HTTP/2.0", host: "binixo.com.br"
2026/09/20 14:50:20 [error] 631204#631204: *18440742 access forbidden by rule, client: 34.28.221.210, server: binixo.com.br, request: "GET /.env.backup HTTP/2.0", host: "binixo.com.br"
2026/09/20 14:50:20 [error] 631204#631204: *18440744 access forbidden by rule, client: 34.28.221.210, server: binixo.com.br, request: "GET /.aws/credentials HTTP/2.0", host: "binixo.com.br"
...
show less
|
Web App Attack
|
|
🇺🇸
paulo.apoloni
|
|
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /config/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
34.28.221.210 - - [20/Sep/2026 ...
show more
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /config/.env HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /.aws/credentials HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /.aws/config HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /.git/config HTTP/2.0" 444 0 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.28.221.210 - - [20/Sep/2026:11:35:05 -0300] "GET /.env.backup HTTP/2.0" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇧🇷
dominioz
|
|
2026-09-20 14:03:12 GET /.git/config - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+cohere-ai;++https://cohere.com/crawler) - 301 464
2026-09-20 14:03:12 GET /.git/HEAD - - 34.28.221.210 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 462
20 ...
show more
2026-09-20 14:03:12 GET /.git/config - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+cohere-ai;++https://cohere.com/crawler) - 301 464
2026-09-20 14:03:12 GET /.git/HEAD - - 34.28.221.210 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 462
2026-09-20 14:03:12 GET /.git/HEAD - - 34.28.221.210 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 462
2026-09-20 14:03:13 GET /.git/config - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+cohere-ai;++https://cohere.com/crawler) https://balbinomoveis.com.br/.git/config 404 34449
...
show less
|
Web App Attack
|
|
🇧🇷
Halux
|
|
34.28.221.210 Web Application Firewall multiple violations
|
Hacking
Web App Attack
|
|
🇧🇷
dominioz
|
|
2026-09-20 12:18:54 GET /.git-credentials - - 34.28.221.210 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 590
2026-09-20 12:18:54 GET /.git/config - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+YiBot/1.0;++https://01.ai/) - 301 580
2026-09 ...
show more
2026-09-20 12:18:54 GET /.git-credentials - - 34.28.221.210 HTTP/2 CCBot/2.0+(https://commoncrawl.org/faq/) - 301 590
2026-09-20 12:18:54 GET /.git/config - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+YiBot/1.0;++https://01.ai/) - 301 580
2026-09-20 12:18:54 GET /.git/HEAD - - 34.28.221.210 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko;+compatible;+ClaudeBot/1.0;[email protected]) - 301 576
2026-09-20 12:18:54 GET /.gitconfig - - 34.28.221.210 HTTP/2 Mozilla/5.0+(compatible;+KimiBot/1.0;++https://kimi.ai/) - 301 578
2026-09-20 12:18:54 GET /.env_1 - - 34.28.221.210 HTTP/2 Mozilla/5.0+AppleWebKit/537.36+(KHTML,+like+Gecko);+compatible;+GPTBot/1.4;++https://openai.com/gptbot - 301 570
...
show less
|
Web App Attack
|
|
🇺🇸
9LEVEL.com.br
|
|
Blocked by Fail2ban for traefik-404 abuse
|
Web App Attack
|
|
🇺🇸
agenciahypelab.com.br
|
|
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
|
Brute-Force
SSH
|
|
Anonymous
|
|
suspicious request in access.log
|
Web App Attack
|
|
🇧🇷
Halux
|
|
34.28.221.210 Probing protected path or service
|
Web App Attack
|
|
🇨🇦
Blinker73
|
|
2026-09-20T04:16 kernel: OUT= SRC=34.28.221.210 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=18750 DF PROTO=TCP SPT=58300 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-09-20T04:16 kernel: OUT= SRC=34.28.221.210 LEN=60 TOS=0x00 PREC=0x00 TTL=51 I ...
show more
2026-09-20T04:16 kernel: OUT= SRC=34.28.221.210 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=18750 DF PROTO=TCP SPT=58300 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-09-20T04:16 kernel: OUT= SRC=34.28.221.210 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=31332 DF PROTO=TCP SPT=51476 DPT=8080 WINDOW=65320 RES=0x00 SYN URGP=0
2026-09-20T07:00 kernel: OUT= SRC=34.28.221.210 LEN=60 TOS=0x00 PREC=0x00 TTL=51 ID=8648 DF PROTO=TCP SPT=60602 DPT=8443 WINDOW=65320 RES=0x00 SYN URGP=
show less
|
Port Scan
|