🇩🇪
bazter.pro
2026-09-06 22:31:52
(51 minutes ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-06 22:20:55
(1 hour ago)
Brute-Force
Web App Attack
Anonymous
2026-09-06 20:44:19
(2 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇬🇧
Marten Mark
2026-09-06 18:18:12
(5 hours ago)
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /rclone.conf HTTP/2.0" 404 23033 "https://www.c ...
show more
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /rclone.conf HTTP/2.0" 404 23033 "https://www.cfi.co/rclone.conf" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /z9x8c7v6b5-debug-trigger-www.cfi.co HTTP/2.0" 404 23033 "https://www.cfi.co/z9x8c7v6b5-debug-trigger-www.cfi.co" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /z9x8c7v6b5-debug-trigger-www.cfi.co HTTP/2.0" 404 23033 "https://www.cfi.co/z9x8c7v6b5-debug-trigger-www.cfi.co" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /serviceAccountKey.json HTTP/2.0" 404 23033 "https://www.cfi.co/serviceAccountKey.json" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
35.252.137.245 - - [06/Sep/2026:18:18:10 +0000] "GET /serviceAccountKe
...
show less
Port Scan
Web App Attack
🇬🇧
Marten Mark
2026-09-06 14:47:23
(8 hours ago)
35.252.137.245 - - [06/Sep/2026:14:47:23 +0000] "GET /.aws/credentials HTTP/2.0" 404 23033 "-" "Mozi ...
show more
35.252.137.245 - - [06/Sep/2026:14:47:23 +0000] "GET /.aws/credentials HTTP/2.0" 404 23033 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )"
...
show less
Web App Attack
Bad Web Bot
🇪🇸
el-brujo
2026-09-06 13:10:49
(10 hours ago)
35.252.137.245 - - [06/Sep/2026:15:10:49 +0200] "GET /z9x8c7v6b5-debug-trigger-www.elhacker.net HTTP ...
show more
35.252.137.245 - - [06/Sep/2026:15:10:49 +0200] "GET /z9x8c7v6b5-debug-trigger-www.elhacker.net HTTP/2.0" 404 16069 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
35.252.137.245 - - [06/Sep/2026:15:10:49 +0200] "GET /build/manifest.json HTTP/2.0" 404 16069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.252.137.245 - - [06/Sep/2026:15:10:49 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 16069 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
35.252.137.245 - - [06/Sep/2026:15:10:49 +0200] "GET /rclone.conf HTTP/2.0" 404 16069 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)"
...
show less
Web App Attack
Hacking
🇩🇪
itsolon
2026-09-06 12:30:38
(10 hours ago)
[06/Sep/2026:14:30:34 +0200] 178869783458.534304 35.252.137.245 0 217.154.7.177 443
[06/Sep/2026:14: ...
show more
[06/Sep/2026:14:30:34 +0200] 178869783458.534304 35.252.137.245 0 217.154.7.177 443
[06/Sep/2026:14:30:34 +0200] 178869783449.471523 35.252.137.245 0 217.154.7.177 443
[06/Sep/2026:14:30:34 +0200] 178869783491.797174 35.252.137.245 0 217.154.7.177 443
[06/Sep/2026:14:30:34 +0200] 178869783478.178295 35.252.137.245 0 217.154.7.177 443
[06/Sep/2026:14:30:34 +0200] 178869783485.389771 35.252.137.245 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
mnsf
2026-09-06 12:05:22
(11 hours ago)
Scanning/Probing (13)
Brute-Force
Web App Attack
🇩🇪
raph
2026-09-06 10:50:50
(12 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 10:31:40
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇪🇸
el-brujo
2026-09-06 08:38:41
(14 hours ago)
35.252.137.245 - - [06/Sep/2026:10:38:41 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/t ...
show more
35.252.137.245 - - [06/Sep/2026:10:38:41 +0200] "GET /var/run/secrets/kubernetes.io/serviceaccount/token HTTP/2.0" 404 15863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.252.137.245 - - [06/Sep/2026:10:38:41 +0200] "GET /rclone.conf HTTP/2.0" 404 15863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.252.137.245 - - [06/Sep/2026:10:38:41 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 15863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
35.252.137.245 - - [06/Sep/2026:10:38:41 +0200] "GET /.dockerenv HTTP/2.0" 404 15863 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36 Edg/149.0.0.0"
...
show less
Web App Attack
Hacking
🇩🇪
Marc
2026-09-06 08:36:59
(14 hours ago)
35.252.137.245 - - [06/Sep/2026:10:36:58 +0200] "GET /@fs/.env?import&?raw?? HTTP/2.0" 404 291 "-" " ...
show more
35.252.137.245 - - [06/Sep/2026:10:36:58 +0200] "GET /@fs/.env?import&?raw?? HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 35.252.137.245 - - [06/Sep/2026:10:36:58 +0200] "GET /wp-json HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36" 35.252.137.245 - - [06/Sep/2026:10:36:58 +0200] "GET /rclone.conf HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36"
show less
Brute-Force
Anonymous
2026-09-06 08:33:37
(14 hours ago)
[ssd5.kdns.gr] httpd-config-scan: sites=www.papalexandrakis.com; logs=/var/log/httpd/domains/papalex ...
show more
[ssd5.kdns.gr] httpd-config-scan: sites=www.papalexandrakis.com; logs=/var/log/httpd/domains/papalexandrakis.com.log; samples=/service-account.json | /.github/.env | /.docker/config.json
show less
Hacking
Web App Attack
🇧🇪
cmbplf
2026-09-06 08:26:57
(14 hours ago)
523 requests with url.path */@fs/*
231 requests with url.path *.oci/*
194 requests with url.path ...
show more
523 requests with url.path */@fs/*
231 requests with url.path *.oci/*
194 requests with url.path */proc/*
show less
Brute-Force
Bad Web Bot
🇵🇱
nakordoni.eu
2026-09-06 08:00:05
(15 hours ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matc ...
show more
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (US), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 75/100.
show less
Bad Web Bot
Web App Attack