🇫🇷
masterguru
2026-11-11 04:08:36
UTC ·
(15 hours ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-131)
Hacking
🇦🇹
SchiWaGoA
2026-11-10 03:20:59
UTC ·
(1 day ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
🇳🇱
Brict IT
2026-11-10 03:13:19
UTC ·
(1 day ago)
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-09 12:45:31
UTC ·
(2 days ago)
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.65.62 - - [09/Nov/2026:13:45:26 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[cb-13al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.65.62 - - [09/Nov/2026:13:45:26 +0100] "GET /.git/config HTTP/1.1" 404 2125 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-11-08 17:51:18
UTC ·
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇬🇧
consul.to
2026-11-08 17:49:51
UTC ·
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-11-08 15:59:56
UTC ·
(3 days ago)
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "POST / HT ...
show more
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [08/Nov/2026:17:59:52 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [08/Nov/2026:17:59:53 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62
...
show less
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-11-07 03:29:00
UTC ·
(4 days ago)
34.85.65.62 - - [07/Nov/2026:05:28:59 +0200] "GET /phpinfo.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [07/Nov/2026:05:28:59 +0200] "GET / ...
show more
34.85.65.62 - - [07/Nov/2026:05:28:59 +0200] "GET /phpinfo.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.85.65.62 - - [07/Nov/2026:05:28:59 +0200] "GET /info.php HTTP/2.0" 301 281 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇱🇻
radix
2026-11-07 00:23:11
UTC ·
(4 days ago)
Automated probing for sensitive configuration files and environment leaks.
Brute-Force
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 22:59:51
UTC ·
(4 days ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇳🇱
Alt255
2026-11-06 15:16:01
UTC ·
(5 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.65.62 - - [06/Nov/2026:16:15:43 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.85.65.62 - - [06/Nov/2026:16:15:43 +0100] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
diosama
2026-11-06 12:20:56
UTC ·
(5 days ago)
CrowdSec blocked: crowdsecurity/appsec-vpatch
Brute-Force
Web App Attack
🇩🇪
rh24
2026-11-06 10:06:05
UTC ·
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.85.65.62 (JP/Japan/62.65.85.34.bc.googleusercontent.com)
SQL Injection
🇩🇪
ghostwarriors
2026-11-05 23:50:09
UTC ·
(5 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
throny
2026-11-05 23:34:55
UTC ·
(5 days ago)
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 5 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0 ...
show more
Bad web bot on a honeypot: ignored robots.txt (Disallow: /) and kept crawling without browser behaviour.
Requests within an hour: 5 on 1 host(s)
User agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
Requested, e.g.:
- support.[REDACTED]/
- support.[REDACTED]/.git/config
show less
Bad Web Bot