π«π·
masterguru
2026-09-01 03:56:37
(1 day ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-201)
show less
Hacking
π©πͺ
FeG Deutschland
2026-09-01 03:55:54
(1 day ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
π©πͺ
Melle
2026-09-01 02:31:08
(1 day ago)
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 35.223.82.204 triggered 5 event ...
show more
Blocked by CrowdSec | Scenario: crowdsecurity/http-sensitive-files | 35.223.82.204 triggered 5 events | Detected: 2026-09-01T02:31:08.040516046Z
show less
Web App Attack
Hacking
π©πͺ
dbmwebdesign
2026-09-01 02:25:15
(1 day ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack
π¬π§
consul.to
2026-08-31 22:51:28
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
Anonymous
2026-08-31 21:29:54
(1 day ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
π¦πΉ
Pingger Shikkoken
2026-08-31 15:47:52
(1 day ago)
2026-08-31T15:47:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC ...
show more
2026-08-31T15:47:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=35.223.82.204 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=26769 DF PROTO=TCP SPT=42664 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-31T15:47:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=35.223.82.204 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=4991 DF PROTO=TCP SPT=42678 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 2026-08-31T15:47:52+00:00 iskariot kernel: AbuseIPDB-Blacklist-Dropped: IN=ens3 OUT=ServerBridge MAC=b6:ab:74:e6:2e:14:2c:dd:e9:13:03:d9:08:00 SRC=35.223.82.204 DST=10.1.1.2 LEN=60 TOS=0x00 PREC=0x60 TTL=55 ID=18364 DF PROTO=TCP SPT=42680 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0 ...
show less
Hacking
Bad Web Bot
π³π±
JCB
2026-08-30 07:58:00
(3 days ago)
35.223.82.204 - - [30/Aug/2026:04:37:00 +0300] "GET /.env.bak HTTP/1.1" 403 239 "-" "crusader-worker ...
show more
35.223.82.204 - - [30/Aug/2026:04:37:00 +0300] "GET /.env.bak HTTP/1.1" 403 239 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:04:37:00 +0300] "GET /.env.backup HTTP/1.1" 403 239 "-" "crusader-worker/1.0"
...
show less
Web App Attack
Hacking
π―π΅
ki3
2026-08-30 02:54:29
(3 days ago)
Fail2Ban: Web App Attacks and Forum Spam 35.223.82.204 1788058468.0(JST)
Web Spam
Bad Web Bot
Web App Attack
π³π±
spirttm
2026-08-30 01:55:15
(3 days ago)
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env HTTP/1.1" 404 162 "-" "crusader-worker/1.0 ...
show more
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.production HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.local HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.backup HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.prod HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.bak HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.old HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.dev HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55:14 +0000] "GET /.env.save HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
35.223.82.204 - - [30/Aug/2026:01:55
...
show less
Port Scan
Web App Attack
π³π±
i-turnradio.nl
2026-08-30 01:53:51
(3 days ago)
2026-08-30 03:53:51 (CET) ~ Blocked by abusescan risk assessment
Web App Attack
π«π·
LRNP
2026-08-30 01:25:10
(3 days ago)
_:443 35.223.82.204 - - [30/Aug/2026:01:24:50 +0000] "GET /.env HTTP/1.1" 404 146 "-" "crusader-work ...
show more
_:443 35.223.82.204 - - [30/Aug/2026:01:24:50 +0000] "GET /.env HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
πΈπͺ
sweplox.se
2026-08-30 01:09:05
(3 days ago)
Ip 35.223.82.204 performed 'crowdsecurity/http-sensitive-files' (5 events over 6.346261ms) at 2026-0 ...
show more
Ip 35.223.82.204 performed 'crowdsecurity/http-sensitive-files' (5 events over 6.346261ms) at 2026-08-30 01:09:04.2289058 +0000 UTC
show less
Hacking
πΏπ¦
conure.sh
2026-08-29 12:01:37
(4 days ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
π²π½
octageeks.com
2026-08-29 04:30:01
(4 days ago)
Wordpress malicious attack:[octablocked]
Web App Attack