๐ฆ๐บ
Mengda Wen
2026-05-23 05:47:37
(2 weeks ago)
Automated threat activity observed on 2026-05-23. Categories: bad_web_bot, hacking.
Bad Web Bot
Hacking
๐ฌ๐ง
sc user
2026-05-18 01:34:10
(3 weeks ago)
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad ...
show more
Fail2Ban nginx: repeated suspicious HTTP requests consistent with automated probing, scanning or bad bot behaviour. Technical log details and local server identifiers intentionally omitted for privacy.
show less
Bad Web Bot
Web App Attack
Port Scan
Anonymous
2026-05-17 19:48:35
(3 weeks ago)
$f2bV_matches
Brute-Force
๐ณ๐ฑ
Site.eu
2026-05-17 17:07:19
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
mk-dizajn.hr
2026-05-17 04:17:59
(3 weeks ago)
$f2bV_matches
Bad Web Bot
๐บ๐ธ
rwgomes
2026-05-17 04:00:04
(3 weeks ago)
Automated report from Intelligence Finance Tools. Cumulative threat score: 92. Failed logins: 0, 404 ...
show more
Automated report from Intelligence Finance Tools. Cumulative threat score: 92. Failed logins: 0, 404 probes: 77.
show less
Web App Attack
Port Scan
๐ซ๐ฎ
kumiko
2026-05-17 00:51:16
(3 weeks ago)
[2026-05-17 03:51:16] Known bad bot [Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.c ...
show more
[2026-05-17 03:51:16] Known bad bot [Mozilla/5.0 (compatible; SemrushBot/7~bl; +http://www.semrush.com/bot.html)]
show less
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-05-16 23:07:02
(3 weeks ago)
Accessed trap at '/.aws/credentials'
Web App Attack
๐ซ๐ฎ
smallhost_helsinki
2026-05-16 21:40:00
(3 weeks ago)
Tried to access non existent path: /.env
Web App Attack
๐ญ๐บ
DumaNet
2026-05-16 19:51:00
(3 weeks ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 May 16. 15:08:36
Source IP: 96.62. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 May 16. 15:08:36
Source IP: 96.62.228.101
Portion of the log(s):
96.62.228.101 - [16/May/2026:15:08:36 +0200] "GET /.env.example HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
96.62.228.101 - [16/May/2026:15:08:36 +0200] "GET /.env.production HTTP/1.1" 404 153 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.6 Safari/605.1.15"
96.62.228.101 - [16/May/2026:15:08:36 +0200] "GET /.env.local HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.36"
96.62.228.101 - [16/May/2026:15:08:36 +0200] "GET /.env.development HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 Edg/131.0.0.0"
96.62.228.101 - [16/May/2026:15:08:36 +0200] "GET /.aws/credentials
show less
Web App Attack
๐ญ๐บ
DumaNet
2026-05-16 19:32:00
(3 weeks ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 May 16. 12:17:28
Source IP: 96.62. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 May 16. 12:17:28
Source IP: 96.62.228.101
Portion of the log(s):
96.62.228.101 - [16/May/2026:12:17:27 +0200] "GET /static/manifest.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; xAI-SearchBot/1.0; +https://x.ai)"
96.62.228.101 - [16/May/2026:12:17:23 +0200] "GET /.astro/manifest.json HTTP/1.1" 404 153 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
96.62.228.101 - [16/May/2026:12:17:23 +0200] "GET /_nuxt/builds/latest.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; CohereBot/1.0; +https://cohere.com/bot)"
96.62.228.101 - [16/May/2026:12:17:18 +0200] "GET /_nuxt/manifest.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
96.62.228.101 - [16/May/2026:12:17:17 +0200] "GET /dist/.vite/manifest.json HTTP/1.1" 404 153 "-" "Mozilla/5.0 (compatible; Applebot/0.1; +http://www.apple.com/go/applebot)"
96.62.228.101 - [16/May/2026:12:17:15 +0200] "GET /dist/manifest.json HT
show less
Web App Attack
๐ซ๐ฎ
6kilowatti
2026-05-16 18:13:56
(3 weeks ago)
96.62.228.101 - - [16/May/2026:21:13:55 +0300] "GET /super-secret-ansa/ HTTP/1.1" 404 60 "-" "Mozill ...
show more
96.62.228.101 - - [16/May/2026:21:13:55 +0300] "GET /super-secret-ansa/ HTTP/1.1" 404 60 "-" "Mozilla/5.0 (compatible; MistralBot/1.0; +https://mistral.ai)"
...
show less
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-05-16 16:51:06
(3 weeks ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฌ๐ง
consul.to
2026-05-16 14:09:17
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
ELYAZ
2026-05-16 13:54:52
(3 weeks ago)
(y3) Failed access -byebye- from 96.62.228.101 (US/United States/-): (CF_ENABLE)
Hacking