๐ณ๐ฑ
Alt255
2026-09-17 15:56:36
(7 hours ago)
[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-03ov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.32.58.217 - - [17/Sep/2026:17:56:27 +0200] "GET /.git/config HTTP/1.1" 404 2127 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
webanyone
2026-09-17 12:47:58
(10 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
๐ฉ๐ช
MarKup
2026-09-17 09:38:31
(13 hours ago)
apache-noscript
Hacking
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-17 08:05:33
(15 hours ago)
[17/Sep/2026:11:05:33 +0300] -- 34.32.58.217 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[17/Sep/2026:11:05:33 +0300] -- 34.32.58.217 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-17 03:47:56
(19 hours ago)
34.32.58.217 - - [17/Sep/2026:03:46:53 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.32.58.217 - - [17/Sep/2026:03:46:53 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.58.217"
34.32.58.217 - - [17/Sep/2026:03:46:53 +0000] "POST / HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.58.217"
34.32.58.217 - - [17/Sep/2026:03:46:53 +0000] "GET /.git/config HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.58.217"
34.32.58.217 - - [17/Sep/2026:03:46:54 +0000] "GET /.env HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.58.217"
34.32.58.217 - - [17/Sep/2026:03:46:54 +0000] "GET /.env.local HTTP/1.1" 403 208 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0
...
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-17 03:08:13
(20 hours ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-17 02:49:22
(20 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
ger-stg-sifi1
2026-09-17 02:46:12
(20 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ฆ
lakered
2026-09-16 18:04:23
(1 day ago)
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-C ...
show more
Detectors: [NGINX] | Reasons: Nginx Honeypot: Sensitive configuration file search | Evidence: High-Criminality-Signature (ja4:t13d4312h1 - Ratio:0.99), High-Criminality-Signature (ja4h:33f56baf5bd7a8c6c1fc8c4c9a1d4829 - Ratio:0.95) | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | TCP Fingerprint: Linux (Legacy/Embedded) (Link:generic tunnel or VPN, Uptime:13806m)
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-09-16 17:48:25
(1 day ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 16:16:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.32.58.217 (217.58.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.58.217 (217.58.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:15:57.523671 2026] [security2:error] [pid 9983:tid 9983] [client 34.32.58.217:46068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "matterofbritain.com"] [uri "/.git/config"] [unique_id "aqrAvTDN_N9AtxZLy4MPsQAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ญ
Ribeye375
2026-09-16 16:06:00
(1 day ago)
HIPS web-exfiltration - Block tcp/0:65535
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-16 15:50:11
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-16 15:33:25
(1 day ago)
34.32.58.217 - - [16/Sep/2026:17:33:19 +0200] "GET /.env.local HTTP/1.1" 200 2890 "-" "Mozilla/5.0 ( ...
show more
34.32.58.217 - - [16/Sep/2026:17:33:19 +0200] "GET /.env.local HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.58.217 - - [16/Sep/2026:17:33:19 +0200] "GET /.env.production HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.58.217 - - [16/Sep/2026:17:33:20 +0200] "GET /.env.staging HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.58.217 - - [16/Sep/2026:17:33:20 +0200] "GET /.env.development HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.58.217 - - [16/Sep/2026:17:33:20 +0200] "GET /.env.test HTTP/1.1" 200 2890 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Saf
show less
Web App Attack
Hacking
๐บ๐ธ
MatCat
2026-09-16 15:05:09
(1 day ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot