🇫🇷
masterguru
2026-10-18 02:13:01
(2 hours ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-196)
show less
Hacking
🇩🇪
Philister11
2026-10-18 00:39:26
(3 hours ago)
CrowdSec: crowdsecurity/grafana-cve-2021-43798 (US/AS396982)
Web App Attack
Hacking
🇮🇹
ciccio diddo
2026-10-17 19:44:42
(8 hours ago)
High Burst multiple 40X port:Tcp/80,443
Brute-Force
Web App Attack
🇩🇪
hbrks
2026-10-17 18:47:42
(9 hours ago)
200 attack(s) detected, such as these: {"event":"web_block","ip":"34.53.92.198","host":"hub.marche-b ...
show more
200 attack(s) detected, such as these: {"event":"web_block","ip":"34.53.92.198","host":"hub.marche-be.com","request":"POST /icecoder/lib/file-control.php HTTP/2.0","user_agent":"","reason":"Status-444","timestamp":"2026-10-17T18:47:42 00:00","logentry":"hub.marche-be.com 34.53.92.198 - - [17/Oct/2026:18:47:42 0000] \"POST /icecoder/lib/file-control.php HTTP/2.0\" 444 0 \"-\" \"CCBot/2.0 (https://commoncrawl.org/faq/)\" \"-\""} * Report Details *: https://p4u.xyz/L3YFNLWJ9AM/1* IP Details *: https://p4u.xyz/L3YFNLWJ9AM/2
show less
Web Spam
Hacking
Bad Web Bot
🇳🇱
Alt255
2026-10-17 17:40:28
(10 hours ago)
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.53.92.198 - - [17/Oct/2026:19:40:11 +0200] "GET /build/.env HTTP/2.0" 403 372 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
2026-10-17 17:19:30
(11 hours ago)
Aggressive web scan
Web App Attack
🇫🇷
security.rdmc.fr
2026-10-17 17:05:52
(11 hours ago)
Sensitive File Scan
Web App Attack
🇩🇪
netclix.gr
2026-10-17 12:35:24
(15 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.53.92.198 (US/United States/198.92.5 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.53.92.198 (US/United States/198.92.53.34.bc.googleusercontent.com)
show less
SQL Injection
🇩🇪
EGP Abuse Dept
2026-10-17 11:18:08
(17 hours ago)
Scanning for web/db/file exploits on tpc-023.mach3builders.nl
SQL Injection
Bad Web Bot
Web App Attack
2026-10-17 09:30:04
(18 hours ago)
CrowdSec decision: crowdsecurity/http-bad-user-agent (origin: crowdsec)
Port Scan
🇨🇦
CentiDevOps
2026-10-17 08:00:32
(20 hours ago)
Web app scan detected by fail2ban/banip: 34 requests in 0 s across 2 domains (301). Paths: /.git/HEA ...
show more
Web app scan detected by fail2ban/banip: 34 requests in 0 s across 2 domains (301). Paths: /.git/HEAD, /.git/config, /.env.supabase (+11 more). Sample: 2026-10-17T08:00:32Z "GET /web/.env" 301
show less
Hacking
Web App Attack
🇺🇸
[email protected]
2026-10-17 06:59:49
(21 hours ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 71h59m56s)
Web App Attack
🇩🇪
sternwart
2026-10-17 05:01:20
(23 hours ago)
Automatisch erkannt: Zugriff auf /.env.credentials (3d.alpasana.ch)
Web App Attack
Bad Web Bot
🇺🇸
EmilGH
2026-10-17 04:28:17
(1 day ago)
34.53.92.198 - - [17/Oct/2026:00:28:16 -0400] "GET /robots.txt HTTP/1.1" 404 473 "-" "Mozilla/5.0 Ap ...
show more
34.53.92.198 - - [17/Oct/2026:00:28:16 -0400] "GET /robots.txt HTTP/1.1" 404 473 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.53.92.198 - - [17/Oct/2026:00:28:16 -0400] "GET /g4s1m7d49oz1nchdd5ru HTTP/1.1" 404 473 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.53.92.198 - - [17/Oct/2026:00:28:16 -0400] "GET /5y8mk06l4ki6lud7dpkh HTTP/1.1" 404 473 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.53.92.198 - - [17/Oct/2026:00:28:17 -0400] "GET /z9x8c7v6b5-debug-trigger-backoffice.silverskybox.com HTTP/1.1" 404 473 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.53.92.198 - - [17/Oct/2026:00:28:17 -0400] "GET /manual HTTP/1.1" 404 4425 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.53.92.198 - - [17/Oct/2026:00:28:17 -0400] "GET /files
...
show less
Bad Web Bot
Web App Attack
2026-10-17 04:24:56
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
