๐ฌ๐ง
sc user
2026-09-15 22:24:33
(2 hours ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
๐ฌ๐ง
sc user
2026-09-14 21:51:45
(1 day ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
๐ซ๐ท
IRISIO
2026-09-14 11:46:16
(1 day ago)
scans/SQL injection/spam posts : 1590 queries
Web App Attack
SQL Injection
๐จ๐ญ
beatsnet.com
2026-09-14 07:23:40
(1 day ago)
[Mon Sep 14 09:23:39.253523 2026] [proxy_fcgi:error] [pid 27213:tid 15978342195216] [remote 34.74.18 ...
show more
[Mon Sep 14 09:23:39.253523 2026] [proxy_fcgi:error] [pid 27213:tid 15978342195216] [remote 34.74.188.184:34828] AH01071: Got error 'Primary script unknown'
[Mon Sep 14 09:23:39.356733 2026] [proxy_fcgi:error] [pid 27213:tid 15978342191120] [remote 34.74.188.184:34828] AH01071: Got error 'Primary script unknown'
[Mon Sep 14 09:23:39.402043 2026] [proxy_fcgi:error] [pid 27213:tid 15978342193168] [remote 34.74.188.184:34828] AH01071: Got error 'Primary script unknown'
[Mon Sep 14 09:23:39.519034 2026] [proxy_fcgi:error] [pid 27213:tid 15978342195216] [remote 34.74.188.184:34828] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
Mainpine
2026-09-14 06:53:10
(1 day ago)
probing for vulnerable web apps
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-14 06:00:01
(1 day ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
Anonymous
2026-09-14 04:59:20
(1 day ago)
34.74.188.184 - - [13/Sep/2026:23:59:18 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (co ...
show more
34.74.188.184 - - [13/Sep/2026:23:59:18 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.74.188.184
34.74.188.184 - - [13/Sep/2026:23:59:18 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" 34.74.188.184
34.74.188.184 - - [13/Sep/2026:23:59:19 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" 34.74.188.184
34.74.188.184 - - [13/Sep/2026:23:59:19 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" 34.74.188.184
34.74.188.184 - - [13/Sep/2026:23:59:19 -0500] "GET /.env.production?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" 34.74.188.184
34.74.188.184 - - [13/Sep/2026:23:59:19 -0500] "GET /.env.local?import&raw HTTP/1.1" 403 199 "-"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-09-14 01:50:08
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-14 00:30:02
(2 days ago)
CrowdSec decision: crowdsecurity/http-admin-interface-probing (origin: crowdsec)
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-09-13 20:20:41
(2 days ago)
Mutliple attempts to access forbidden web resources, HTTP code 403.
Web App Attack
Anonymous
2026-09-13 19:07:05
(2 days ago)
Automated web scanner. Requested suspicious paths: /z9x8c7v6b5-debug-trigger-tigzig.com | /.vite/man ...
show more
Automated web scanner. Requested suspicious paths: /z9x8c7v6b5-debug-trigger-tigzig.com | /.vite/manifest.json | /dist/.vite/manifest.json | /.env.example | /dist/manifest.json | /build/manifest.json. UTC: 2026-09-13 18:44:22.
show less
Web App Attack
๐บ๐ธ
CDO
2026-09-13 18:23:30
(2 days ago)
URL Injection attempt detected. Automated web attack.
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-09-13 18:00:55
(2 days ago)
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; ...
show more
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36"
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET /z9x8c7v6b5-debug-trigger-shapeuphealthshop.com HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET /.env?raw HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET /.dockerenv HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET /proc/self/cgroup HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.74.188.184 - - [13/Sep/2026:20:00:54 +0200] "GET /proc/self/cmdline HTTP/1.1" 403 124 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gec
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-09-13 17:51:06
(2 days ago)
fail2ban:piguard2:18,19,21
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-09-13 17:26:03
(2 days ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack