🇳🇱
Alt255
2026-09-18 07:43:27
(3 hours ago)
[ti-24al] Web exploit scanning: 28 suspicious requests detected by fail2ban jail apache-scanner. Exa ...
show more
[ti-24al] Web exploit scanning: 28 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.205.189.228 - - [18/Sep/2026:09:43:20 +0200] "GET /config/.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
35.205.189.228 - - [18/Sep/2026:09:43:20 +0200] "GET /src/.env HTTP/2.0" 404 2004 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
35.205.189.228 - - [18/Sep/2026:09:43:20 +0200] "GET /build/.env HTTP/2.0" 403 540 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
35.205.189.228 - - [18/Sep/2026:09:43:20 +0200] "GET /web/.env HTTP/2.0" 403 540 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai.com/gptbot)"
35.205.189.228 - - [18/Sep/2026
...
show less
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-09-18 06:00:02
(4 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇩🇪
mondor.ro
2026-09-18 03:18:27
(7 hours ago)
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.205.189.228, Reason ...
show more
Cluster member 148.251.176.225 (DE/Germany/antares.webyouridea.ro) said, DENY 35.205.189.228, Reason:[(mod_security) mod_security (id:210832) triggered by 35.205.189.228 (BE/Belgium/228.189.205.35.bc.googleusercontent.com): 3 in the last 3600 secs]; Ports: *; Direction: inout; Trigger: LF_CLUSTER; Logs:
show less
Port Scan
🇮🇹
VHosting
2026-09-18 03:05:03
(7 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-09-18 01:00:19
(9 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-09-18 00:16:26
(10 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-17 21:48:58
(13 hours ago)
Multiple WAF Violations
Web App Attack
🇫🇷
IRISIO
2026-09-17 19:31:31
(15 hours ago)
scans/SQL injection/spam posts : 2840 queries
Web App Attack
SQL Injection
🇱🇹
damorfati
2026-09-17 18:58:40
(15 hours ago)
ANNA automated report (scanning) | hacking - agent:Mozilla/5.0 (compatible; MoonshotBot/1.0; +https: ...
show more
ANNA automated report (scanning) | hacking - agent:Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/), body: null, method: GET, url: /.ssh/id_dsa
show less
Web App Attack
Hacking
🇩🇪
Bedios GmbH
2026-09-17 13:44:17
(21 hours ago)
Login credentials theft attempt
Hacking
🇫🇷
IRISIO
2026-09-17 13:37:58
(21 hours ago)
scans/SQL injection/spam posts : 909 queries
Web App Attack
SQL Injection
2026-09-17 13:10:34
(21 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇫🇮
tjs
2026-09-17 12:30:00
(22 hours ago)
web attack
Hacking
Web App Attack
🇩🇪
Marc
2026-09-17 10:11:07
(1 day ago)
35.205.189.228 - - [17/Sep/2026:12:11:07 +0200] "GET /files../.env HTTP/2.0" 404 291 "-" "Mozilla/5. ...
show more
35.205.189.228 - - [17/Sep/2026:12:11:07 +0200] "GET /files../.env HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 35.205.189.228 - - [17/Sep/2026:12:11:07 +0200] "GET /static//home/user/.env HTTP/2.0" 404 269 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )" 35.205.189.228 - - [17/Sep/2026:12:11:07 +0200] "GET /static//.env HTTP/2.0" 404 269 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
show less
Brute-Force
🇳🇱
Alt255
2026-09-17 09:48:39
(1 day ago)
[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <nam ...
show more
[ti-01ov] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail <name>. Example: 35.205.189.228 - - \[17/Sep/2026:11:48:21 +0200\] "GET /.ssh/id_ed25519 HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/\)"
35.205.189.228 - - \[17/Sep/2026:11:48:21 +0200\] "GET /.ssh/authorized_keys HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; ChatGLM-Spider/1.0\; +https://zhipuai.cn/\)"
35.205.189.228 - - \[17/Sep/2026:11:48:21 +0200\] "GET /.ssh/id_rsa HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; Kimi-SearchBot/1.0\; +https://kimi.ai/\)"
35.205.189.228 - - \[17/Sep/2026:11:48:21 +0200\] "GET /z9x8c7v6b5-debug-trigger-account.partijhandelaar.nl HTTP/1.1" 404 2101 "-" "Mozilla/5.0 \(compatible\; xAI-Grok/1.0\; +https://x.ai/\)"
35
...
show less
Bad Web Bot
Web App Attack