๐ฉ๐ช
NetShield-DE
2026-06-22 14:07:55
(3 hours ago)
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-22T ...
show more
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-22T16:07:02+0200. Last: 2026-06-22T16:07:02+0200.
Samples:
- 2026-06-21 05:36:24,911 fail2ban.actions [3599610]: NOTICE [abuseipdb] Ban 5.255.98.183
show less
Web App Attack
Anonymous
2026-06-22 12:16:37
(5 hours ago)
Fuzzing/Looking for credentials files.
Brute-Force
Web App Attack
๐ณ๐ฟ
Antinson
2026-06-22 10:55:15
(6 hours ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-06-22 10:54:40
(6 hours ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-06-22 10:13:55
(7 hours ago)
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /wp-content/debug.log HTTP/1.1" 403 508 "-" "Mozi ...
show more
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /wp-content/debug.log HTTP/1.1" 403 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0"
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /.cursor/mcp.json HTTP/1.1" 404 505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /.env HTTP/1.1" 403 508 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_4 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Mobile/15E148 Safari/604.1"
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /.openclaw/agents/main/agent/models.json HTTP/1.1" 404 505 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
5.255.98.183 - - [22/Jun/2026:12:13:49 +0200] "GET /.aws/credentials HTTP/1.1" 403 508 "-" "Mozilla/5.0 (Macintosh; Intel
...
show less
DDoS Attack
๐ณ๐ฑ
Savvii
2026-06-22 09:17:42
(7 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-06-22 09:17:28
(7 hours ago)
2026/06/22 09:17:26 [error] 3439403#3439403: *322509283 access forbidden by rule, client: 5.255.98.1 ...
show more
2026/06/22 09:17:26 [error] 3439403#3439403: *322509283 access forbidden by rule, client: 5.255.98.183, server: binixo.pl, request: "GET /wp-content/debug.log HTTP/2.0", host: "binixo.pl", referrer: "https://www.binixo.pl/wp-content/debug.log"
2026/06/22 09:17:26 [error] 3439402#3439402: *322445904 access forbidden by rule, client: 5.255.98.183, server: binixo.pl, request: "GET /.env HTTP/2.0", host: "binixo.pl", referrer: "https://www.binixo.pl/.env"
2026/06/22 09:17:27 [error] 3439403#3439403: *322453658 access forbidden by rule, client: 5.255.98.183, server: binixo.pl, request: "GET /.openclaw/agents/main/agent/models.json HTTP/2.0", host: "binixo.pl", referrer: "https://www.binixo.pl/.openclaw/agents/main/agent/models.json"
...
show less
Web App Attack
๐ฉ๐ช
NetShield-DE
2026-06-22 09:07:51
(8 hours ago)
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-22T ...
show more
Auto-report via Fail2Ban aggregation. IP observed in jails: abuseipdb.
Events: 1. First: 2026-06-22T11:07:01+0200. Last: 2026-06-22T11:07:01+0200.
Samples:
- 2026-06-21 05:36:24,911 fail2ban.actions [3599610]: NOTICE [abuseipdb] Ban 5.255.98.183
show less
Web App Attack
๐ฌ๐ง
Smish
2026-06-22 08:18:42
(8 hours ago)
HONEYPOT HIT --> Fail2ban time=1782116321 log=2026-06-22T09:18:41+01:00 ip=5.255.98.183 host=shitcun ...
show more
HONEYPOT HIT --> Fail2ban time=1782116321 log=2026-06-22T09:18:41+01:00 ip=5.255.98.183 host=shitcunt.ovh method=GET uri="/wp-content/debug.log" status=404 ua="Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0" ref="-" rid=0e62849413994078aca679887accf27a
show less
Web App Attack
๐ฎ๐น
VHosting
2026-06-22 08:15:04
(9 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐ง๐ช
cmbplf
2026-06-22 07:11:46
(10 hours ago)
897 requests with url.path *.git/*
492 requests with url.path *config.json
140 requests with url. ...
show more
897 requests with url.path *.git/*
492 requests with url.path *config.json
140 requests with url.path */debug.log
140 requests with url.path *debug.log
114 requests with url.path *.config/*
113 requests with url.path *.kube/*
110 requests with url.path *.docker/*
106 requests with url.path *.yarnrc
105 requests with url.path *.npmrc
show less
Brute-Force
Bad Web Bot
๐ฌ๐ง
consul.to
2026-06-22 06:13:48
(11 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-06-22 06:06:56
(11 hours ago)
[Mon Jun 22 08:06:53.367571 2026] [authz_core:error] [pid 2659323:tid 137198812776128] [client 5.255 ...
show more
[Mon Jun 22 08:06:53.367571 2026] [authz_core:error] [pid 2659323:tid 137198812776128] [client 5.255.98.183:61812] AH01630: client denied by server configuration: /mnt/backup-nas/HSK
[Mon Jun 22 08:06:54.590465 2026] [authz_core:error] [pid 2692187:tid 137198920505024] [client 5.255.98.183:61814] AH01630: client denied by server configuration: /mnt/backup-nas/HSK
[Mon Jun 22 08:06:56.218749 2026] [authz_core:error] [pid 2692187:tid 137198812776128] [client 5.255.98.183:61828] AH01630: client denied by server configuration: /mnt/backup-nas/HSK
[Mon Jun 22 08:06:56.306928 2026] [authz_core:error] [pid 2659323:tid 137198837954240] [client 5.255.98.183:61842] AH01630: client denied by server configuration: /mnt/backup-nas/HSK
[Mon Jun 22 08:06:56.311898 2026] [authz_core:error] [pid 2692187:tid 137198787598016] [client 5.255.98.183:62056] AH01630: client denied by server configuration: /mnt/backup-nas/HSK
...
show less
Brute-Force
SSH
๐ณ๐ฑ
ConsulHosting
2026-06-22 05:59:27
(11 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐บ๐ธ
kosada.com
2026-06-22 05:54:01
(11 hours ago)
Web vulnerability probing: /config.json
Web App Attack