🇳🇱
Alt255
2026-09-16 03:26:02
(3 days ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.32.26.81 - - [16/Sep/2026:05:25:46 +0200] "GET /.git/config HTTP/1.1" 404 2129 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇴
jad-abuse
2026-09-16 01:33:52
(3 days ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_expos ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: git_exposure, env_probe, source_backup, server_status. Observed by 1 sensor(s); 169 hits.
show less
Web App Attack
🇨🇿
Countryman
2026-09-16 00:53:02
(3 days ago)
IPS detection: React.Server.Components.react-flight.Remote.Code.Execution
Hacking
🇨🇿
Countryman
2026-09-16 00:53:02
(3 days ago)
IPS detection: React.Server.Components.react-flight.Remote.Code.Execution
Hacking
🇳🇴
doofy
2026-09-16 00:23:06
(3 days ago)
[Wed Sep 16 02:23:05.413953 2026] [authz_core:error] [pid 1207636:tid 1207705] [client 34.32.26.81:4 ...
show more
[Wed Sep 16 02:23:05.413953 2026] [authz_core:error] [pid 1207636:tid 1207705] [client 34.32.26.81:40786] AH01630: client denied by server configuration: /www/hekser.net/.git
[Wed Sep 16 02:23:05.493618 2026] [authz_core:error] [pid 1207636:tid 1207698] [client 34.32.26.81:40786] AH01630: client denied by server configuration: /www/hekser.net/.env
[Wed Sep 16 02:23:05.521144 2026] [authz_core:error] [pid 1207636:tid 1207699] [client 34.32.26.81:40786] AH01630: client denied by server configuration: /www/hekser.net/.env.local
[Wed Sep 16 02:23:05.548667 2026] [authz_core:error] [pid 1207636:tid 1207701] [client 34.32.26.81:40786] AH01630: client denied by server configuration: /www/hekser.net/.env.production
[Wed Sep 16 02:23:05.575958 2026] [authz_core:error] [pid 1207636:tid 1207693] [client 34.32.26.81:40786] AH01630: client denied by server configuration: /www/hekser.net/.env.staging
...
show less
Brute-Force
Web App Attack
🇩🇪
v1nc
2026-09-15 20:42:25
(3 days ago)
34.32.26.81 - - [15/Sep/2026:20:42:25 +0000] "GET /phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (W ...
show more
34.32.26.81 - - [15/Sep/2026:20:42:25 +0000] "GET /phpinfo.php HTTP/1.1" 404 181 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
🇳🇱
Site.eu
2026-09-15 13:23:18
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇮🇹
VHosting
2026-09-15 05:30:05
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
2026-09-15 05:28:28
(3 days ago)
34.32.26.81 - - [15/Sep/2026:13:28:28 +0800] "GET /.git/config HTTP/1.1" 301 236 "-" "Mozilla/5.0 (W ...
show more
34.32.26.81 - - [15/Sep/2026:13:28:28 +0800] "GET /.git/config HTTP/1.1" 301 236 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-09-15 04:56:41
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-15 03:57:07
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇪🇸
pipeline.es
2026-09-15 03:39:26
(4 days ago)
Web scanning / probing for vulnerable paths | URL: /psnlink/.env | Evidence: novorumo.pt 34.32.26.81 ...
show more
Web scanning / probing for vulnerable paths | URL: /psnlink/.env | Evidence: novorumo.pt 34.32.26.81 - - [15/Sep/2026:05:38:54 +0200] \"GET /psnlink/.env HTTP/1.1\" 404 20550 \"-\" \"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=DE | ASN: GOOGLE-CLOUD-PLATFORM | Country: DE
show less
Port Scan
Web App Attack