🇳🇱
Alt255
2026-10-26 21:17:01
UTC ·
(2 weeks ago)
[ti-14al] Web exploit scanning: 7 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - [22/Oct/2026:13:34:46 +0200] "GET /.git/config HTTP/1.1" 404 573 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.3 ...
show more
[ti-14al] Web exploit scanning: 7 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - [22/Oct/2026:13:34:46 +0200] "GET /.git/config HTTP/1.1" 404 573 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - [22/Oct/2026:13:34:46 +0200] "GET /.env HTTP/1.1" 404 573 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - [22/Oct/2026:13:34:46 +0200] "GET /.env.local HTTP/1.1" 404 573 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - [22/Oct/2026:13:34:46 +0200] "GET /.env.production HTTP/1.
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-26 05:45:59
UTC ·
(2 weeks ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-10-26 02:24:09
UTC ·
(2 weeks ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇳🇱
Alt255
2026-10-25 13:14:38
UTC ·
(2 weeks ago)
[ti-12al] Web exploit scanning: 18 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.git/config HTTP/1.1" 301 697 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 18 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.git/config HTTP/1.1" 301 697 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.env HTTP/1.1" 301 683 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.env.local HTTP/1.1" 301 695 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.env.production HTTP/1.1" 301 705 "-" "Mozilla/5.0 \(X11\; Linux x8
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-25 10:05:06
UTC ·
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
🇧🇪
taivas.nl
2026-10-25 05:39:08
UTC ·
(2 weeks ago)
Many_bad_calls
Web App Attack
🇧🇪
taivas.nl
2026-10-24 04:36:22
UTC ·
(3 weeks ago)
Bad_requests
Bad Web Bot
🇩🇪
v1nc
2026-10-24 02:06:16
UTC ·
(3 weeks ago)
34.91.245.140 - - [24/Oct/2026:02:06:15 +0000] "GET /cakephp/.env HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Hacking
🇺🇸
dot.mg
2026-10-23 23:47:03
UTC ·
(3 weeks ago)
Bad behaviour
Web Spam
🇳🇱
Alt255
2026-10-23 22:30:29
UTC ·
(3 weeks ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.git/config HTTP/1.1" 301 697 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.91.245.140 - - \[24/Oct/2026:00:30:15 +0200\] "GET /.git/config HTTP/1.1" 301 697 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-10-23 18:34:13
UTC ·
(3 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Site.eu
2026-10-23 17:44:57
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇵🇱
Budyn
2026-10-23 12:31:24
UTC ·
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.goblinpot.site | URI: /.git/config | UA: Mo ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: vault.goblinpot.site | URI: /.git/config | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"NL","Cf-Connecting-Ip":"34.91.245.140","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4f0c2330d08221b-MAN","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id":"acdbb
show less
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-10-22 19:23:57
UTC ·
(3 weeks ago)
{"level":"info","ts":1792697031.3922112,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.91.245.140","remote_port":"57398","client_ip":"34.91.245.140","proto":"HTTP/1.1","method":"GET","host":"updown.digitalpie.co.uk ...
show more
{"level":"info","ts":1792697031.3922112,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.91.245.140","remote_port":"57398","client_ip":"34.91.245.140","proto":"HTTP/1.1","method":"GET","host":"updown.digitalpie.co.uk","uri":"/.env.test","headers":{"Connection":["keep-alive"],"Next-Action":["x"],"X-Nextjs-Request-Id":["641fe273"],"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"http/1.1","server_name":"updown.digitalpie.co.uk","ech":false}},"bytes_read":0,"user_id":"","duration":0.000177008,"size":0,"status":429,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"],"Server":["Caddy"]}}
{"level":"info","ts":1792697031.5703979,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.91.
...
show less
DDoS Attack
Web App Attack
🇬🇧
venus.launch.bz
2026-10-22 17:52:21
UTC ·
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.91.245.140 (140.245.91.34.bc.googleusercontent.com)
SQL Injection
