๐ฎ๐ณ
evicky2002
2026-09-17 06:00:05
(1 hour ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฉ๐ช
raph
2026-09-16 04:45:17
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-09-16 04:31:50
(1 day ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
๐ณ๐ฑ
oisecnet
2026-09-15 21:02:35
(1 day ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-09-15. 503 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-09-15. 503 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
๐ณ๐ฑ
thedreamer.nl
2026-09-15 15:22:13
(1 day ago)
34.66.47.24 - - [15/Sep/2026:17:20:21 +0200] "GET /.env HTTP/2.0" 200 995 "-" "Mozilla/5.0 AppleWebK ...
show more
34.66.47.24 - - [15/Sep/2026:17:20:21 +0200] "GET /.env HTTP/2.0" 200 995 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "US" "Council Bluffs" "41.25910" "-95.85170"
34.66.47.24 - - [15/Sep/2026:17:20:21 +0200] "GET /.git/config HTTP/2.0" 200 995 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)" "US" "Council Bluffs" "41.25910" "-95.85170"
34.66.47.24 - - [15/Sep/2026:17:20:21 +0200] "GET /.env.bak HTTP/2.0" 200 995 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)" "US" "Council Bluffs" "41.25910" "-95.85170"
34.66.47.24 - - [15/Sep/2026:17:20:21 +0200] "GET /.env.local HTTP/2.0" 200 995 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)" "US" "Council Bluffs" "41.25910" "-95.85170"
...
show less
Hacking
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
jormaster3k
2026-09-15 15:00:06
(1 day ago)
Attack against Apache (too many 404s)
Web App Attack
๐ฌ๐ง
rakkor
2026-09-15 14:57:48
(1 day ago)
2026-09-15T15:57:47+01:00 NAS [Tue Sep 15 15:57:47.636850 2026] [proxy_fcgi:error] [pid 3550:tid 358 ...
show more
2026-09-15T15:57:47+01:00 NAS [Tue Sep 15 15:57:47.636850 2026] [proxy_fcgi:error] [pid 3550:tid 3584] [client 34.66.47.24:53876] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Hacking
๐ฌ๐ง
poundawebsiteltd
2026-09-15 14:43:35
(1 day ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.66.47.2 ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.66.47.24 (US/United States/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.66.47.24 (US/United States/24.47.66.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 14:32:39
(1 day ago)
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.66.47.24 - - [15/Sep/2026:16:32:30 +0200] "GET /.aws/credentials HTTP/2.0" 404 2004 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
34.66.47.24 - - [15/Sep/2026:16:32:30 +0200] "GET /.ssh/id_dsa HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-15 14:08:57
(1 day ago)
cloudlinux2 fail2ban: 2026-09-15 16:03:48,855 fail2ban.filter [1908]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-15 16:03:48,855 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 154.162.124.174 - 2026-09-15 16:03:48cloudlinux2 fail2ban: 2026-09-15 16:04:23,285 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 104.248.145.11 - 2026-09-15 16:04:23cloudlinux2 fail2ban: 2026-09-15 16:04:21,175 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 104.248.145.11 - 2026-09-15 16:04:21cloudlinux2 fail2ban: 2026-09-15 16:04:33,013 fail2ban.actions [1908]: NOTICE [plesk-modsecurity] Unban 34.40.9.67cloudlinux2 fail2ban: 2026-09-15 16:06:15,524 fail2ban.filter [1908]: INFO [plesk-wordpress] Found 173.239.211.18 - 2026-09-15 16:06:15cloudlinux2 fail2ban: 2026-09-15 16:06:45,233 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 34.22.66.49 - 2026-09-15 16:06:45cloudlinux2 fail2ban: 2026-09-15 16:06:54,323 fail2ban.filter [1908]: INFO [plesk-modsecurity] Found 207.175.45.9 - 2026-09-15 16:06:54cloudlinux2 fail2ban
show less
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-15 13:45:44
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-15 13:45:20
(1 day ago)
Observed scanned 67 known-sensitive endpoint(s), e.g.: /.aws/credentials, /.bashrc, /.env, /.env.bak ...
show more
Observed scanned 67 known-sensitive endpoint(s), e.g.: /.aws/credentials, /.bashrc, /.env, /.env.bak, /.env.local, /.env.production
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
maxpower
2026-09-15 13:43:45
(1 day ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.66.47.24 (US/United States/24.47.66.3 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.66.47.24 (US/United States/24.47.66.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.66.47.24 - - [15/Sep/2026:15:43:40 +0200] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 200 4867 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" "34.66.47.24" host=lidotrocadero.com
show less
Port Scan
๐จ๐ญ
Origon
2026-09-15 13:27:43
(1 day ago)
http-probing - IP: 34.66.47.24 - time="2026-09-15T15:27:43+02:00" level=info msg="(555f66b4f6a74558 ...
show more
http-probing - IP: 34.66.47.24 - time="2026-09-15T15:27:43+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-probing by ip 34.66.47.24 (US/396982) : 4h ban on Ip 34.66.47.24" module=db
show less
Web App Attack
๐ฌ๐ง
SilverZippo
2026-09-15 13:22:54
(1 day ago)
Web App Attack
Web App Attack