๐จ๐ญ
TheCoon
2026-10-23 06:36:55
(9 hours ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ฉ๐ช
s@ch@
2026-10-22 12:15:01
(1 day ago)
Jail: plesk-modsecurity | Web application attack (Plesk ModSecurity)
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-22 12:14:34
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-22 11:22:23
(1 day ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.86.248.0 - - [22/Oct/2026:13:22:18 +0200] "GET /.git/config HTTP/1.1" 500 1049053 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-22 10:29:51
(1 day ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.86.248.0 - - \[22/Oct/2026:12:29:36 +0200\] "GET /.git/config HTTP/1.1" 500 9020 "-" "Mozilla/5.0 \(Windows NT 10.0\; Win64\; x64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-22 10:18:05
(1 day ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
on-com
2026-10-22 09:55:09
(1 day ago)
URL scan
Brute-Force
Web App Attack
๐ฉ๐ช
Alpiskris
2026-10-22 08:10:52
(1 day ago)
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "GET /.git/config HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "POST / HTTP/1.1" 405 552 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.86.248.0 - - [22/Oct/2026:08:10:41 +0000] "GET /.env HTTP/1.1" 403 180 "-" "Mozilla/5.0 (X11
...
show less
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-22 07:59:35
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: teddypot.cloud | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"US","Cf-Connecting-Ip":"34.86.248.0","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4e6f6a6684f9c55-IAD","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id
show less
Hacking
Web App Attack
๐บ๐ธ
Lee Daniel
2026-10-22 04:54:31
(1 day ago)
34.86.248.0 - - [22/Oct/2026:00:54:30 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows ...
show more
34.86.248.0 - - [22/Oct/2026:00:54:30 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-10-22 04:48:35
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.86.248.0 (US/United States/0.248.86. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.86.248.0 (US/United States/0.248.86.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
๐ฟ๐ฆ
conure.sh
2026-10-22 04:43:36
(1 day ago)
csagent: score 19.7: secrets grab x2; 1 domain(s) in 16s
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-22 04:30:38
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
webanyone
2026-10-22 04:12:18
(1 day ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-10-22 03:58:54
(1 day ago)
Scanning for web/db/file exploits on welovecosmetics.nl
SQL Injection
Bad Web Bot
Web App Attack