🇭🇺
miszterx.hu
2026-11-10 07:51:48
UTC ·
(1 day ago)
XORP (haproxy): 748x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇱🇹
NotACaptcha
2026-11-10 06:00:51
UTC ·
(1 day ago)
webserver:443 [10/Nov/2026] "GET /old_files.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /configs.zip HTTP/1.1" 404 517 ...
show more
webserver:443 [10/Nov/2026] "GET /old_files.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /configs.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /offline.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /backup/files.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /userinfo.zip HTTP/1.1" 404 5175 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
webserver:443 [10/Nov/2026] "GET /userlist.zip HTTP/1.1" 404 5175 "-" "...
show less
SQL Injection
Web App Attack
🇺🇸
Block Rockin' Beats
2026-11-10 05:33:09
UTC ·
(1 day ago)
Scanning for exploitable scripts
Hacking
Web App Attack
🇩🇪
rzk
2026-11-10 05:29:04
UTC ·
(1 day ago)
CrowdSec scenario: crowdsecurity/http-sensitive-files. Banned by Koru Cloud platform after multi-event detection. ASN: AMAZON-AES. Country: US. Timestamp: 2026-11-10T05:29:04+00:00.
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-11-10 05:20:04
UTC ·
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-11-10 05:03:05
UTC ·
(1 day ago)
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /mc.zip HTTP/1.1" 404 67774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET ...
show more
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /mc.zip HTTP/1.1" 404 67774 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /default_logo.zip HTTP/1.1" 404 67767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /install.pgsql.zip HTTP/1.1" 404 67767 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /public_backup.zip HTTP/1.1" 404 67768 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
98.84.105.252 - - [10/Nov/2026:06:02:58 +0100] "GET /opensource.zip HTTP/1.1" 404 67766 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Ch
show less
Bad Web Bot
🇸🇪
sweplox.se
2026-11-10 04:53:19
UTC ·
(1 day ago)
Ip 98.84.105.252 performed 'crowdsecurity/http-crawl-non_statics' (41 events over 56.18577ms) at 2026-11-10 04:53:17.817921719 +0000 UTC
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-11-10 04:37:22
UTC ·
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
Anonymous
2026-11-10 04:32:12
UTC ·
(1 day ago)
Bot / seems abusive / Apache connections: 140
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
netclix.gr
2026-11-10 04:26:23
UTC ·
(1 day ago)
(security_scan) Sensitive File Scan Blocked 98.84.105.252 (US/United States/ec2-98-84-105-252.compute-1.amazonaws.com)
Hacking
🇩🇪
bescared
2026-11-10 03:39:57
UTC ·
(1 day ago)
F2B - Malicious activity detected. URL Probing. -c23856ef-
Hacking
Bad Web Bot
Web App Attack
🇩🇪
Marc
2026-11-10 03:39:23
UTC ·
(1 day ago)
98.84.105.252 - - [10/Nov/2026:04:39:23 +0100] "GET /incremental_backup.zip HTTP/1.1" 404 4609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 98.84.105.252 - - [10/Nov/2026:04:39: ...
show more
98.84.105.252 - - [10/Nov/2026:04:39:23 +0100] "GET /incremental_backup.zip HTTP/1.1" 404 4609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 98.84.105.252 - - [10/Nov/2026:04:39:23 +0100] "GET /magazin.zip HTTP/1.1" 404 4608 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36" 98.84.105.252 - - [10/Nov/2026:04:39:23 +0100] "GET /lenya.zip HTTP/1.1" 404 4609 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"
show less
Brute-Force
🇩🇪
updown.io
2026-11-10 03:27:57
UTC ·
(1 day ago)
{"level":"info","ts":1794281277.5459108,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"98.84.105.252","remote_port":"60684","client_ip":"98.84.105.252","proto":"HTTP/1.1","method":"GET","host":"uptime.virtua.cloud","u ...
show more
{"level":"info","ts":1794281277.5459108,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"98.84.105.252","remote_port":"60684","client_ip":"98.84.105.252","proto":"HTTP/1.1","method":"GET","host":"uptime.virtua.cloud","uri":"/wireless.zip","headers":{"Connection":["close"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/123.0.0.0 Safari/537.36"],"Range":["bytes=0-3"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"uptime.virtua.cloud","ech":false}},"bytes_read":0,"user_id":"","duration":0.000232934,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1794281277.5467315,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"98.84.105.252","remote_port":"35478","client_ip":"98.84.105.252","proto":"HTTP/1.1","method":"GET","host":"uptime.virtua.cloud","uri":"/pi
...
show less
DDoS Attack
Web App Attack
🇸🇪
sweplox.se
2026-11-10 03:23:12
UTC ·
(1 day ago)
Ip 98.84.105.252 performed 'crowdsecurity/http-crawl-non_statics' (41 events over 79.269173ms) at 2026-11-10 03:23:11.450626171 +0000 UTC
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-11-10 03:15:03
UTC ·
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack