🇨🇳
LBLaiSiNanHai
2026-11-12 08:19:19
UTC ·
(1 day ago)
Likely directory scan attempt: GET /api/pricing
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-11-10 21:40:09
UTC ·
(3 days ago)
Web App Attack
🇩🇪
pltcldvlpr
2026-11-10 14:41:56
UTC ·
(3 days ago)
CMS/framework probe: 104.28.152.165 - - [10/Nov/2026:15:41:55 +0100] "GET /wp-config.php.swp HTTP/1.1" 400 141 "https://www.google.com/search?q=languagetool.netznarbe.de" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" asn= ...
show more
CMS/framework probe: 104.28.152.165 - - [10/Nov/2026:15:41:55 +0100] "GET /wp-config.php.swp HTTP/1.1" 400 141 "https://www.google.com/search?q=languagetool.netznarbe.de" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" asn=13335 org="Cloudflare, Inc." country=CA
...
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-11-10 13:59:58
UTC ·
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 14
Exploited Host
Web App Attack
🇳🇱
Alt255
2026-11-10 04:31:53
UTC ·
(4 days ago)
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [10/Nov/2026:05:31:47 +0100] "GET /.env.backup HTTP/1.1" 403 6239 "https://www.google.com/search?q=www.freyr.eu" "Mozilla/5.0 ...
show more
[cb-05al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [10/Nov/2026:05:31:47 +0100] "GET /.env.backup HTTP/1.1" 403 6239 "https://www.google.com/search?q=www.freyr.eu" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-11-06 23:54:49
UTC ·
(1 week ago)
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.28.152.165 80 - [06/Nov/2026:13:33:35 +0000] "GET [redacted] HTTP/1.1" 404 2059 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWe ...
show more
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.28.152.165 80 - [06/Nov/2026:13:33:35 +0000] "GET [redacted] HTTP/1.1" 404 2059 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36"
104.28.152.165 80 - [06/Nov/2026:23:54:49 +0000] "GET [redacted] HTTP/1.1" 404 2059 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇩🇪
ger-stg-sifi1
2026-11-06 19:53:06
UTC ·
(1 week ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
Alt255
2026-11-06 19:39:47
UTC ·
(1 week ago)
[live3bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [06/Nov/2026:20:39:38 +0100] "GET /.env.dist HTTP/1.1" 404 16935 "https://www.google.com/search?q=apiwerkbon-sander.bdaconnect ...
show more
[live3bd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [06/Nov/2026:20:39:38 +0100] "GET /.env.dist HTTP/1.1" 404 16935 "https://www.google.com/search?q=apiwerkbon-sander.bdaconnect.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_5) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
DrLex0
2026-11-06 13:33:35
UTC ·
(1 week ago)
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.28.152.165 80 - [06/Nov/2026:13:33:35 +0000] "GET [redacted] HTTP/1.1" 404 2059 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWe ...
show more
BnL005: Obvious distributed image scraping attempt, using broken crawler written by someone with severe brain damage
104.28.152.165 80 - [06/Nov/2026:13:33:35 +0000] "GET [redacted] HTTP/1.1" 404 2059 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/64.0.3282.119 Safari/537.36"
show less
Bad Web Bot
Exploited Host
🇫🇷
uthul
2026-11-03 05:55:20
UTC ·
(1 week ago)
T-Pot honeypot: 3 hits on ports [80] (automated)
Port Scan
Web App Attack
🇳🇱
Alt255
2026-10-29 03:32:50
UTC ·
(2 weeks ago)
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [29/Oct/2026:04:32:28 +0100] "GET /.env HTTP/1.1" 404 50368 "https://www.google.com/search?q=www.hollandseboerderij.nl" "Mozil ...
show more
[ti-29al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [29/Oct/2026:04:32:28 +0100] "GET /.env HTTP/1.1" 404 50368 "https://www.google.com/search?q=www.hollandseboerderij.nl" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-28 10:45:46
UTC ·
(2 weeks ago)
[ti-hoogstraov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.152.165 - - \[28/Oct/2026:11:45:22 +0100\] "GET /.env.development HTTP/1.1" 404 7446 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http:/ ...
show more
[ti-hoogstraov] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 104.28.152.165 - - \[28/Oct/2026:11:45:22 +0100\] "GET /.env.development HTTP/1.1" 404 7446 "-" "Mozilla/5.0 \(compatible\; Googlebot/2.1\; +http://www.google.com/bot.html\)"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-10-28 00:55:55
UTC ·
(2 weeks ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [28/Oct/2026:01:55:31 +0100] "GET /.env.test HTTP/1.1" 302 5656 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebK ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 104.28.152.165 - - [28/Oct/2026:01:55:31 +0100] "GET /.env.test HTTP/1.1" 302 5656 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/135.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-10-27 23:20:57
UTC ·
(2 weeks ago)
104.28.152.165 - - [28/Oct/2026:00:20:57 +0100] "GET /.git/config HTTP/1.1" 404 120 "https://www.google.com/search?q=mta-sts.thebomb.site" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
Brute-Force
Web App Attack
🇷🇴
SpamStopper
2026-10-27 20:48:40
UTC ·
(2 weeks ago)
Fail2Ban - WordPress\(Anomis\) Looking for CMS/PHP/SQL vulnerabilities and hacked web hosts servers
Hacking
Brute-Force
Bad Web Bot
Web App Attack