๐ณ๐ฑ
Savvii
2026-10-25 22:40:57
(8 hours ago)
20 attempts against mh-misbehave-ban on flow
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Agaman
2026-10-25 21:44:07
(9 hours ago)
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-25 21:44 UTC. Samples: ...
show more
Exploit and secret-file scanning on HTTP(S) port 80/443. 5 requests, 2026-10-25 21:44 UTC. Samples: GET /.git/config 444; GET /.env 444; GET /.env.local 444. UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13. Detected by fail2ban.
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 21:20:29
(10 hours ago)
[cb-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-10al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.192.69 - - [25/Oct/2026:22:20:26 +0100] "GET /.env.txt HTTP/1.0" 301 8241 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-25 18:52:01
(12 hours ago)
20 attempts against mh-misbehave-ban on crop
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 13:13:51
(18 hours ago)
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 3 suspicious requests detected by fail2ban jail <name>. Example: 34.80.192.69 - - \[24/Oct/2026:23:43:54 +0200\] "GET /.git/config HTTP/1.1" 301 661 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.80.192.69 - - \[24/Oct/2026:23:43:54 +0200\] "GET /.env HTTP/1.1" 301 647 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.80.192.69 - - \[24/Oct/2026:23:43:55 +0200\] "GET /.env.local HTTP/1.1" 301 659 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-25 10:18:04
(21 hours ago)
Bot detected scanning for vulnerable pages
Port Scan
๐บ๐ธ
dot.mg
2026-10-25 10:06:04
(21 hours ago)
Scan of vulnerable files
Web App Attack
๐บ๐ธ
dot.mg
2026-10-25 09:51:03
(21 hours ago)
Bad behaviour
Web Spam
๐ต๐ฑ
Budyn
2026-10-25 09:50:02
(21 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: sql.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"TW","Cf-Connecting-Ip":"34.80.192.69","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a500508ecc388091-TPE","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-25 00:46:23
(1 day ago)
IVski WAF | Suspicious activity detected - generic bot or scanner pattern
Hacking
Brute-Force
Web App Attack
๐ฎ๐ช
tarlabs
2026-10-25 00:39:20
(1 day ago)
IP banned by Fail2Ban (traefik-404 jail)
Web App Attack
Anonymous
2026-10-24 22:21:42
(1 day ago)
sensitive path probe detected by fail2ban
...
Port Scan
Web App Attack
๐ฎ๐น
VHosting
2026-10-24 22:10:02
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐น๐ท
ScchutzZ
2026-10-24 22:05:05
(1 day ago)
Fail2Ban banฤฑ. Jail: plesk-modsecurity.
Brute-Force
๐ฉ๐ช
Laplus
2026-10-24 21:48:31
(1 day ago)
34.80.192.69 - - [24/Oct/2026:23:48:25 +0200] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 ( ...
show more
34.80.192.69 - - [24/Oct/2026:23:48:25 +0200] "GET /.git/config HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.80.192.69 - - [24/Oct/2026:23:48:25 +0200] "GET /.env HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.80.192.69 - - [24/Oct/2026:23:48:26 +0200] "GET /.env.local HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.80.192.69 - - [24/Oct/2026:23:48:26 +0200] "GET /.env.production HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.80.192.69 - - [24/Oct/2026:23:48:26 +0200] "GET /.env.staging HTTP/1.1" 302 145 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.80.192.69 - - [24/Oct/2026:23:
...
show less
Hacking
Web App Attack