🇩🇪
bazter.pro
2026-09-19 09:57:03
(51 minutes ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
Anonymous
2026-09-19 08:09:26
(2 hours ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: Word ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: AU, Attack patterns: WordPress scanning, Backup file probing, Cloud secrets probing
show less
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-19 07:38:30
(3 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-09-19 06:28:03
(4 hours ago)
35.201.31.21 - - [19/Sep/2026:06:27:01 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Windows ...
show more
35.201.31.21 - - [19/Sep/2026:06:27:01 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:06:27:01 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:06:27:02 +0000] "GET /.git/config HTTP/1.1" 403 11418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:06:27:03 +0000] "GET /.env HTTP/1.1" 403 11458 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:06:27:03 +0000] "GET /.env.local HTTP/1.1" 403 11418 "-" "Mozilla/5.0 (Windows NT 10.0; Win64
...
show less
Web App Attack
🇳🇱
BlueWire Hosting
2026-09-19 06:03:03
(4 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇪🇸
robotstxt
2026-09-19 04:58:41
(5 hours ago)
35.201.31.21 - - [19/Sep/2026:04:57:40 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Macintos ...
show more
35.201.31.21 - - [19/Sep/2026:04:57:40 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:04:57:40 +0000] "POST / HTTP/1.1" 403 16451 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:04:57:41 +0000] "GET /.git/config HTTP/1.1" 403 11418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:04:57:41 +0000] "GET /.env HTTP/1.1" 403 11418 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="35.201.31.21"
35.201.31.21 - - [19/Sep/2026:04:57:42 +0000] "GET /.env.local HTTP/1.1" 403 11418 "-" "Mozilla/5.0
...
show less
Web App Attack
🇲🇽
octageeks.com
2026-09-19 04:15:56
(6 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇩🇪
marten_o
2026-09-19 02:37:12
(8 hours ago)
35.201.31.21 - - [19/Sep/2026:04:37:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5 ...
show more
35.201.31.21 - - [19/Sep/2026:04:37:12 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 312 458
...
show less
Web App Attack
🇧🇷
dominioz
2026-09-18 23:29:56
(11 hours ago)
2026-09-18 23:29:50 GET /.git/config - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+ ...
show more
2026-09-18 23:29:50 GET /.git/config - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 598
2026-09-18 23:29:50 GET /.env - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 603
2026-09-18 23:29:50 GET /.env - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 603
2026-09-18 23:29:51 GET /.env.local - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 615
...
show less
Web App Attack
🇿🇦
conure.sh
2026-09-18 23:25:45
(11 hours ago)
csagent: score 19.9: secrets grab x2; 1 domain(s) in 3s
Web App Attack
🇧🇷
dominioz
2026-09-18 21:36:56
(13 hours ago)
2026-09-18 21:35:50 GET /.git/config - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+ ...
show more
2026-09-18 21:35:50 GET /.git/config - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 598
2026-09-18 21:35:51 GET /.env - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 603
2026-09-18 21:35:52 GET /.env.local - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 615
2026-09-18 21:35:53 GET /.env.production - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 625
2026-09-18 21:35:55 GET /.env.staging - - 35.201.31.21 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 619
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-09-18 20:45:04
(14 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
Anonymous
2026-09-18 20:19:38
(14 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-18 18:05:46
(16 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇩🇪
pltcldvlpr
2026-09-18 17:10:55
(17 hours ago)
CMS/framework probe: 35.201.31.21 - - [18/Sep/2026:00:03:45 +0200] "GET /.git/config HTTP/1.1" 301 1 ...
show more
CMS/framework probe: 35.201.31.21 - - [18/Sep/2026:00:03:45 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" asn=396982 org="Google LLC" country=AU
...
show less
Web App Attack