🇫🇷
Phenix Info
2026-10-02 15:00:08
(5 days ago)
SmallGuard.fr/Prestashop Massive 403
Web App Attack
🇳🇱
Alt255
2026-10-02 14:50:05
(5 days ago)
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-06al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.80.54.119 - - [02/Oct/2026:16:50:04 +0200] "GET /uploads../.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
BlueWire Hosting
2026-10-02 13:28:54
(5 days ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇫🇷
Bensay
2026-10-02 13:16:01
(5 days ago)
HTTP web-app probe; method=GET; path=/static../.env; status=403; user-agent=Mozilla/5.0 AppleWebKit/ ...
show more
HTTP web-app probe; method=GET; path=/static../.env; status=403; user-agent=Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
show less
Web App Attack
🇫🇷
francoisunix
2026-10-02 12:18:32
(5 days ago)
34.80.54.119 - - [02/Oct/2026:12:18:29 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; In ...
show more
34.80.54.119 - - [02/Oct/2026:12:18:29 +0000] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.80.54.119 - - [02/Oct/2026:12:18:30 +0000] "GET /tb9sse00fyewgilov0kc HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
34.80.54.119 - - [02/Oct/2026:12:18:30 +0000] "GET /model/info HTTP/1.1" 444 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
34.80.54.119 - - [02/Oct/2026:12:18:30 +0000] "GET /z9x8c7v6b5-debug-trigger-www.tagaz.fr HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
34.80.54.119 - - [02/Oct/2026:12:18:30 +0000] "GET /model/info HTTP/1.1" 444 0 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
...
show less
Web App Attack
🇳🇱
Savvii
2026-10-02 11:26:59
(5 days ago)
20 attempts against mh-misbehave-ban on yeti
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-02 10:27:36
(5 days ago)
1.294 requests with url.path *.env
267 requests with url.path */@fs/*
112 requests with url.path ...
show more
1.294 requests with url.path *.env
267 requests with url.path */@fs/*
112 requests with url.path */proc/*
show less
Brute-Force
Bad Web Bot
2026-10-02 10:11:35
(5 days ago)
[Fri Oct 02 12:11:35.016381 2026] [php:error] [pid 310561:tid 310561] [client 34.80.54.119:48116] sc ...
show more
[Fri Oct 02 12:11:35.016381 2026] [php:error] [pid 310561:tid 310561] [client 34.80.54.119:48116] script '/var/www/webmail/app_dev.php' not found or unable to stat
...
show less
Brute-Force
🇳🇱
Savvii
2026-10-02 09:57:59
(5 days ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-02 09:45:26
(5 days ago)
{"level":"info","ts":1790934321.028241,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1790934321.028241,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.80.54.119","remote_port":"48726","client_ip":"34.80.54.119","proto":"HTTP/2.0","method":"GET","host":"status.tns.fr","uri":"/assets/manifest.json","headers":{"Accept-Encoding":["gzip, deflate, br, zstd"],"Sec-Fetch-Mode":["no-cors"],"Sec-Ch-Ua":["\"Chromium\";v=\"153\", \"Brave\";v=\"153\", \"Not_A Brand\";v=\"8\""],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Sec-Ch-Ua-Mobile":["?0"],"Sec-Fetch-Dest":["script"],"Priority":["u=1"],"X-Nextjs-Data":["1"],"Sec-Ch-Ua-Platform":["\"Windows\""],"Accept-Language":["en-US,en;q=0.9"],"Sec-Fetch-Site":["same-origin"],"Accept":["*/*"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"]},"tls":{"resumed":fals
...
show less
DDoS Attack
Web App Attack
🇳🇱
Savvii
2026-10-02 09:38:38
(5 days ago)
20 attempts against mh-misbehave-ban on soil
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Feelautom
2026-10-02 09:26:04
(5 days ago)
[FeelAutom Auto-Ban] BotIdentityRotation: /wp-json (Score: 218)
Hacking
🇳🇱
Site.eu
2026-10-02 09:19:48
(5 days ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
consul.to
2026-10-02 08:45:37
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
polarolouis
2026-10-02 08:44:36
(5 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
