🇳🇱
Site.eu
2026-10-17 06:51:15
(32 minutes ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
Epimetheus
2026-10-17 06:34:14
(49 minutes ago)
Zombie network / Bot scanner detected:
[POST] /lib/file-control.php
[GET] /credentials.json
[POST] ...
show more
Zombie network / Bot scanner detected:
[POST] /lib/file-control.php
[GET] /credentials.json
[POST] /api/auth
[GET] /.aws/credentials
[GET] /backend/.env
[GET] /.env.save
[GET] /build/.env
[POST] /admin
[POST] /api
[POST] /settings
[GET] /.env
[GET] /railway.json
[GET] /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ
[GET] /agents/.env
[GET] /common/.env
[GET] /docker-compose/.env
[GET] /userfiles
[GET] /public/admin.json
[GET] /privatekey.key
[GET] /....//....//....//..../.env
[GET] /api/console/api_server
[GET] /@fs/proc/self/cmdline
[GET] /billing
[GET] /reset-password
[GET] /.s3cfg
[GET] /dist../.env
[GET] /api/system/fileView
[GET] /fly.toml
[GET] /application/.env
[GET] /id_ed25519
[GET] /localhost.key
[GET] /assets/manifest.json
[GET] /settings
[GET] /.env.credentials
[GET] /.env.production
[GET] /private/.env
[GET] /admin%2F.env
[GET] /scripts/.env
[GET] /packages/.env
[GET] /.env.preprod
[GET] /.github/.env
[GET] /static../.env
[GET] /infra/.env
[
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
ghel
2026-10-17 06:32:37
(50 minutes ago)
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /media../.env HTTP/1.1" 403 468 "-" "Mozilla/5.0 ...
show more
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /media../.env HTTP/1.1" 403 468 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 516 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /google-credentials.json HTTP/1.1" 403 468 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/.env HTTP/1.1" 400 516 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.73.172.220 - - [17/Oct/2026:08:32:35 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 404 465 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +
...
show less
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-17 06:00:51
(1 hour ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .backup/ .bak/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .com/ .compositefont/ .config/ .conf/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .scr/ .sct/ .shs/ .sql/ .swp/ .sys/ .tlb/ .tmp/ .url/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-195)
show less
Hacking
🇯🇵
nhawsjones
2026-10-17 04:55:33
(2 hours ago)
[Sat Oct 17 13:55:32.134442 2026] [authz_core:error] [pid 46587:tid 46587] [client 34.73.172.220:482 ...
show more
[Sat Oct 17 13:55:32.134442 2026] [authz_core:error] [pid 46587:tid 46587] [client 34.73.172.220:48252] AH01630: client denied by server configuration: /var/www/external/.htpasswd, referer: https://hawsjones.com/.htpasswd
...
show less
Brute-Force
🇩🇪
dbmwebdesign
2026-10-17 04:20:13
(3 hours ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
🇩🇪
IVski.com
2026-10-17 00:28:00
(6 hours ago)
IVski WAF | Sensitive file probe detected - looking for .git
Hacking
Brute-Force
Web App Attack
🇺🇸
EmilGH
2026-10-16 23:09:07
(8 hours ago)
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /robots.txt HTTP/1.1" 404 541 "-" "Mozilla/5.0 ( ...
show more
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /robots.txt HTTP/1.1" 404 541 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /console HTTP/1.1" 404 541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /register HTTP/1.1" 404 541 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /portal HTTP/1.1" 404 4518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /signin HTTP/1.1" 404 4518 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.73.172.220 - - [16/Oct/2026:23:09:07 +0000] "GET /dashboard
...
show less
Bad Web Bot
Web App Attack
🇬🇧
Swiptly
2026-10-16 15:50:37
(15 hours ago)
Excessive 403/404/405 PHP/CMS errors from scanning or broken bots
...
Web App Attack
🇳🇱
Savvii
2026-10-16 15:21:44
(16 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-16 15:06:18
(16 hours ago)
[ti-03ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-03ov] Web exploit scanning: 4 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.73.172.220 - - [16/Oct/2026:17:06:02 +0200] "GET /uploads../.env HTTP/2.0" 404 1855 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-16 12:12:46
(19 hours ago)
20 attempts against mh-misbehave-ban on pyrus
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-10-16 11:52:52
(19 hours ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
updown.io
2026-10-16 09:16:28
(22 hours ago)
{"level":"info","ts":1792142187.7667441,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1792142187.7667441,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.73.172.220","remote_port":"47746","client_ip":"34.73.172.220","proto":"HTTP/2.0","method":"GET","host":"status.phpmarket.com.br","uri":"/webpack-stats.json","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-User":["?1"],"Sec-Fetch-Dest":["document"],"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Ch-Ua":["\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Priority":["u=0, i"],"Sec-Fetch-Mode":["navigate"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36"],"X-Nextjs-Data":["1
...
show less
DDoS Attack
Web App Attack
🇫🇷
UnixPrime
2026-10-16 07:22:13
(1 day ago)
34.73.172.220 - - [16/Oct/2026:09:22:12 +0200] "GET /.env.bak HTTP/1.1" 404 118 "-" "Mozilla/5.0 (co ...
show more
34.73.172.220 - - [16/Oct/2026:09:22:12 +0200] "GET /.env.bak HTTP/1.1" 404 118 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.73.172.220 - - [16/Oct/2026:09:22:12 +0200] "GET /.env.production HTTP/1.1" 404 118 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
...
show less
Bad Web Bot
Web App Attack