🇬🇧
andypiper
2026-08-23 01:01:47
(4 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇫🇷
mail.avx.gr
2026-08-23 00:12:39
(5 hours ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 8.235.28.31 - - [17/Aug/2026:22:15:01 +0300] "GET ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 8.235.28.31 - - [17/Aug/2026:22:15:01 +0300] "GET /.git/config HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)"
show less
Web App Attack
🇬🇷
mail.avx.gr
2026-08-21 17:36:54
(1 day ago)
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 8.235.28.31 - - [17/Aug/2026:22:15:01 +0300] "GET ...
show more
Plesk Fail2Ban jail: Plesk-Web-Exploits. Evidence: 8.235.28.31 - - [17/Aug/2026:22:15:01 +0300] "GET /.git/config HTTP/2.0" 404 808 "-" "Mozilla/5.0 (compatible; Diffbot/1.0; +https://diffbot.com)"
show less
Web App Attack
🇬🇧
openstrike.co.uk
2026-08-19 05:14:37
(4 days ago)
70 attacks on env grabbing URLs, config grabbing URLs (type 2), PHP URLs, password grabbing URLs, VC ...
show more
70 attacks on env grabbing URLs, config grabbing URLs (type 2), PHP URLs, password grabbing URLs, VC URLs:
GET /.env.development HTTP/1.1
GET /config/database.yml HTTP/1.1
GET /configuration.php.bak HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /.git/HEAD HTTP/1.1
show less
Hacking
Web App Attack
🇭🇺
DumaNet
2026-08-19 03:54:00
(4 days ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 18. 17:42:02
Source IP: 8.235. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Aug 18. 17:42:02
Source IP: 8.235.28.31
Portion of the log(s):
8.235.28.31 - [18/Aug/2026:17:42:02 +0200] "GET /.cursor/mcp.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
8.235.28.31 - [18/Aug/2026:17:42:02 +0200] "GET /.openclaw/openclaw.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
8.235.28.31 - [18/Aug/2026:17:42:02 +0200] "GET /.openclaw/.env HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
8.235.28.31 - [18/Aug/2026:17:42:02 +0200] "GET /ssl/localhost.key HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ClaudeBot/1.0; +mailto:[email protected] "
8.235.28.31 - [18/Aug/2026:17:42:02 +0200] "GET /ssl/server.key HTTP/1.1" 404
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-08-18 21:59:48
(4 days ago)
Auto-ban: >3000 req/min op 2026-08-18
Web App Attack
SSH
Hacking
🇺🇸
jormaster3k
2026-08-18 20:27:21
(4 days ago)
Attack against Apache (too many 404s)
Web App Attack
🇩🇪
paissangroup
2026-08-18 20:08:27
(4 days ago)
Multiple WAF Violations
Web App Attack
2026-08-18 18:36:09
(4 days ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
🇷🇴
iulianh
2026-08-18 18:10:11
(4 days ago)
80,443
Brute-Force
SSH
🇪🇸
netfactotum
2026-08-18 17:15:46
(4 days ago)
Hacking
Web App Attack
🇳🇱
Site.eu
2026-08-18 17:13:21
(4 days ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
Lacrimosa99
2026-08-18 17:04:11
(4 days ago)
8.235.28.31 - - [18/Aug/2026:19:04:07 +0200] "GET /admin/.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (co ...
show more
8.235.28.31 - - [18/Aug/2026:19:04:07 +0200] "GET /admin/.env HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)"
8.235.28.31 - - [18/Aug/2026:19:04:08 +0200] "GET /firebase-adminsdk.json HTTP/2.0" 404 224 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)"
8.235.28.31 - - [18/Aug/2026:19:04:10 +0200] "GET /server-status HTTP/2.0" 403 227 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/grokbot)"
...
show less
Web Spam
🇬🇧
thetomtaylor.co.uk
2026-08-18 16:02:02
(4 days ago)
Fail2Ban - [WAF]ModSecurity rule violation on modsecurity ... [mx03]
Hacking
SQL Injection
Web App Attack
🇩🇪
updown.io
2026-08-18 15:38:29
(4 days ago)
{"level":"info","ts":1787067506.7723205,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1787067506.7723205,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.235.28.31","remote_port":"42404","client_ip":"8.235.28.31","proto":"HTTP/2.0","method":"GET","host":"g8h5.status.updown.io","uri":"/.profile","headers":{"Cookie":["REDACTED"],"User-Agent":["Mozilla/5.0 (compatible; cohere-ai/1.0; +https://cohere.com)"],"Accept-Encoding":["gzip, deflate"],"Accept":["*/*"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"g8h5.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.000293491,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1787067506.7752223,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"8.235.28.31","remote_port":"42404","client_ip":"8.235.28.31","proto":"HTTP/2.0","method":"POST","host":"g8h5.status.updown.io","uri":"/graphql","headers":{"Sec-F
...
show less
DDoS Attack
Web App Attack