๐ซ๐ท
j-tap
2026-10-26 07:32:52
(3 hours ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-26 04:16:41
(7 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-26 03:51:47
(7 hours ago)
404 burst scanner detected by fail2ban
...
Web App Attack
๐ง๐ท
Peregrine
2026-10-26 03:19:01
(8 hours ago)
Fail2Ban Jail:IU tomcat-honeypot | Evidence: 35.201.207.30 162.158.193.217 - - [24/Oct/2026:09:17:39 ...
show more
Fail2Ban Jail:IU tomcat-honeypot | Evidence: 35.201.207.30 162.158.193.217 - - [24/Oct/2026:09:17:39 -0300] "GET /@fs/app/.env?raw?? HTTP/1.1" 404 -
35.201.207.30 162.158.193.217 - - [24/Oct/2026:09:17:40 -0300] "GET /@fs/var/task/.env?raw?? HTTP/1.1" 404 -
35.201.207.30 162.158.193.217 - - [24/Oct/2026:09:17:40 -0300] "GET /@fs/proc/self/cwd/.env?raw?? HTTP/1.1" 404 -
35.201.207.30 162.158.193.217 - - [24/Oct/2026:09:17:40 -0300] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/1.1" 404 -
show less
Bad Web Bot
๐ซ๐ท
arteagasoft
2026-10-25 23:48:00
(11 hours ago)
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET https arteagasoft.com "/api/.env" [Client 35.201.207.30 ...
show more
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET https arteagasoft.com "/api/.env" [Client 35.201.207.30] [Length 114] [Gzip 1.34] [Sent-to 10.168.0.217] "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "-"
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET https arteagasoft.com "/server/.env" [Client 35.201.207.30] [Length 114] [Gzip 1.34] [Sent-to 10.168.0.217] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" "-"
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET https arteagasoft.com "/.env.old" [Client 35.201.207.30] [Length 114] [Gzip 1.34] [Sent-to 10.168.0.217] "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)" "-"
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET https arteagasoft.com "/public/.env" [Client 35.201.207.30] [Length 114] [Gzip 1.34] [Sent-to 10.168.0.217] "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)" "-"
[25/Oct/2026:23:47:59 +0000] - 404 404 - GET h
...
show less
Brute-Force
๐ซ๐ท
SpaceHost-Server
2026-10-25 23:21:56
(12 hours ago)
Brute-Force
Web App Attack
๐บ๐ธ
kbeezie
2026-10-25 22:41:28
(12 hours ago)
35.201.207.30 - - [25/Oct/2026:18:41:20 -0400] "GET /_image?href=/../../../.env HTTP/1.1" 429 162 "- ...
show more
35.201.207.30 - - [25/Oct/2026:18:41:20 -0400] "GET /_image?href=/../../../.env HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.201.207.30 - - [25/Oct/2026:18:41:20 -0400] "GET /%2Fdashboard HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
35.201.207.30 - - [25/Oct/2026:18:41:20 -0400] "GET /%2Fapi/config HTTP/1.1" 429 162 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
35.201.207.30 - - [25/Oct/2026:18:41:28 -0400] "GET /userfiles/x?path=../../../../proc/self/environ HTTP/1.1" 429 162 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.201.207.30 - - [25/Oct/2026:18:41:28 -0400] "GET /userfiles?path=../../../../proc/self/environ HTTP/1.1" 429 162 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
gws-hostmaster
2026-10-25 21:52:56
(13 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;URL file extension is restricted by policy;
show less
Web App Attack
Anonymous
2026-10-25 21:13:46
(14 hours ago)
35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:42 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozil ...
show more
35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:42 -0600] "GET / HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"\n35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:42 -0600] "GET /robots.txt HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"\n35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:43 -0600] "GET /sitemap.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"\n35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:43 -0600] "GET /sitemap_index.xml HTTP/1.1" 403 158 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"\n35.201.207.30 irwindalecycles.com - [25/Oct/2026:15:13:44 -0600] "GET
show less
DDoS Attack
Web App Attack
๐ง๐ช
cmbplf
2026-10-25 18:37:50
(16 hours ago)
124 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
๐บ๐ธ
pachec
2026-10-25 16:34:01
(18 hours ago)
Automated vulnerability scanning blocked by fail2ban
Web App Attack
Hacking
๐บ๐ธ
factor1
2026-10-25 14:43:58
(20 hours ago)
CrowdSec at churndash Reports Abuse
Web App Attack
๐ฌ๐ง
gws-hostmaster
2026-10-25 14:34:01
(20 hours ago)
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subreq ...
show more
ModSecurity OWASP CRS (Anomaly Score: 45): HTTP header is restricted by policy (/x-middleware-subrequest/);JavaScript Prototype Pollution;JSON-Based SQL Injection;Node.js Injection Attack 1/2;OS File Access Attempt;Remote Command Execution: Unix Shell Code Found;
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 14:18:14
(21 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.201.207.30 - - [25/Oct/2026:15:18:13 +0100] "GET /.env?import&raw HTTP/2.0" 404 1855 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ฎ
albionfreemarket.com
2026-10-25 14:17:51
(21 hours ago)
35.201.207.30 - - [25/Oct/2026:14:17:48 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreem ...
show more
35.201.207.30 - - [25/Oct/2026:14:17:48 +0000] "POST /graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "TW"
35.201.207.30 - - [25/Oct/2026:14:17:49 +0000] "POST /api/graphql HTTP/2.0" 403 555 "https://albionfreemarket.com" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 0.000 "-" "TW"
...
show less
Bad Web Bot
Web App Attack