๐ฉ๐ช
klaus_ph
2026-09-23 19:44:40
(3 days ago)
2026-09-23 03:32:58,257 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 35.204.169.220
. ...
show more
2026-09-23 03:32:58,257 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 35.204.169.220
...
show less
Bad Web Bot
๐ฎ๐น
paoloartone
2026-09-21 05:00:17
(6 days ago)
Reverse proxy TCO: 327 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 20/09/202 ...
show more
Reverse proxy TCO: 327 richieste malevole bloccate (scan/exploit/brute-force WordPress) il 20/09/2026.
show less
Web App Attack
Hacking
Port Scan
Anonymous
2026-09-20 16:02:42
(6 days ago)
Aggressive Robot or Attack DDOS
DDoS Attack
๐ณ๐ฑ
Site.eu
2026-09-20 12:59:30
(6 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
marten_o
2026-09-20 12:38:45
(6 days ago)
35.204.169.220 - - [20/Sep/2026:14:38:45 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 578 "-" "Mozilla ...
show more
35.204.169.220 - - [20/Sep/2026:14:38:45 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 578 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 335 776
...
show less
Web App Attack
๐ฉ๐ช
grassau.com
2026-09-20 12:32:50
(6 days ago)
(mod_security) mod_security triggered on hostname [redacted] 35.204.169.220 (NL/The Netherlands/Gron ...
show more
(mod_security) mod_security triggered on hostname [redacted] 35.204.169.220 (NL/The Netherlands/Groningen/Groningen/220.169.204.35.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
Omega Threat-ID
2026-09-20 12:31:06
(6 days ago)
Omega Point Threat ID honeypot sensor observed: abuse-reported
Port Scan
๐ฉ๐ช
MBombeck
2026-09-20 12:15:55
(6 days ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-20 11:57:08
(6 days ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-09-20 11:02:46
(1 week ago)
[Sun Sep 20 13:02:45.987276 2026] [authz_core:error] [pid 3147446:tid 127876250715840] [client 35.20 ...
show more
[Sun Sep 20 13:02:45.987276 2026] [authz_core:error] [pid 3147446:tid 127876250715840] [client 35.204.169.220:36318] AH01630: client denied by server configuration: /var/www/franvallejo/.git/config
[Sun Sep 20 13:02:46.106497 2026] [authz_core:error] [pid 3147446:tid 127877785827008] [client 35.204.169.220:36318] AH01630: client denied by server configuration: /var/www/franvallejo/.env
[Sun Sep 20 13:02:46.175414 2026] [authz_core:error] [pid 3147446:tid 127876267501248] [client 35.204.169.220:36318] AH01630: client denied by server configuration: /var/www/franvallejo/.env.local
[Sun Sep 20 13:02:46.279892 2026] [authz_core:error] [pid 3147446:tid 127877777434304] [client 35.204.169.220:36318] AH01630: client denied by server configuration: /var/www/franvallejo/.env.production
[Sun Sep 20 13:02:46.449705 2026] [authz_core:error] [pid 3147446:tid 127877802612416] [client 35.204.169.220:36318] AH01630: client denied by server configuration: /var/www/franvallejo/.env.staging
...
show less
Brute-Force
SSH
๐บ๐ธ
agenciahypelab.com.br
2026-09-20 10:52:55
(1 week ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ฉ๐ช
Philister11
2026-09-20 01:16:46
(1 week ago)
CrowdSec: crowdsecurity/http-sensitive-files (NL/AS396982)
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-09-19 23:33:52
(1 week ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
WPJoe
2026-09-19 19:18:05
(1 week ago)
35.204.169.220 - - [19/Sep/2026:19:17:43 +0000] "GET /.git/config HTTP/1.1" 403 422 "-" "Mozilla/5.0 ...
show more
35.204.169.220 - - [19/Sep/2026:19:17:43 +0000] "GET /.git/config HTTP/1.1" 403 422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:19:17:45 +0000] "GET /.env HTTP/1.1" 403 422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:19:17:45 +0000] "GET /.env.local HTTP/1.1" 403 422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:19:17:45 +0000] "GET /.env.production HTTP/1.1" 403 422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:19:17:46 +0000] "GET /.env.staging HTTP/1.1" 403 422 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:19:17:46 +0
...
show less
Web App Attack
Bad Web Bot
๐บ๐ธ
WPJoe
2026-09-19 18:00:04
(1 week ago)
35.204.169.220 - - [19/Sep/2026:17:59:42 +0000] "GET /.git/config HTTP/1.1" 403 422 "-" "Mozilla/5.0 ...
show more
35.204.169.220 - - [19/Sep/2026:17:59:42 +0000] "GET /.git/config HTTP/1.1" 403 422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:17:59:44 +0000] "GET /.env HTTP/1.1" 403 422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:17:59:44 +0000] "GET /.env.local HTTP/1.1" 403 422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:17:59:44 +0000] "GET /.env.production HTTP/1.1" 403 422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.204.169.220 - - [19/Sep/2026:17:59:44 +0000] "GET /.env.staging HTTP/1.1" 403 422 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Web App Attack
Bad Web Bot