Anonymous
2026-10-06 08:48:55
(6 days ago)
Web probing (31 hits in 24h) on www.museumvalkenburg.nl: sensitive-path scans and/or 404 bursts. Rep ...
show more
Web probing (31 hits in 24h) on www.museumvalkenburg.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
Anonymous
2026-10-06 07:57:07
(6 days ago)
Blocked by ModSec and CSF
Port Scan
π©πͺ
LRob
2026-10-06 06:26:00
(6 days ago)
Wordlist path sweep | method: GET | path: /readme.html, /wp-content/themes/astra/page-templates/, /w ...
show more
Wordlist path sweep | method: GET | path: /readme.html, /wp-content/themes/astra/page-templates/, /wp-content/themes/twentytwentyfive/page-templates/ (+3 more) | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | 2026-10-06 06:26 UTC
show less
Port Scan
Web App Attack
π«π·
LRob
2026-09-30 07:04:58
(1 week ago)
Web exploit attempt | method: GET | path: /wp-json/batch/v1 | ua: Mozilla/5.0 (Windows NT 10.0; Win6 ...
show more
Web exploit attempt | method: GET | path: /wp-json/batch/v1 | ua: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | 2026-09-30 07:04 UTC
show less
Hacking
Web App Attack
π¬π§
consul.to
2026-09-30 00:50:56
(1 week ago)
Web attack/malicious scanning detected
Web App Attack
π©πͺ
marten_o
2026-09-26 08:15:16
(2 weeks ago)
31.59.129.150 - - [26/Sep/2026:10:15:16 +0200] "POST /?+config-create+/<?=print(chr(78).chr(120).chr ...
show more
31.59.129.150 - - [26/Sep/2026:10:15:16 +0200] "POST /?+config-create+/<?=print(chr(78).chr(120).chr(82).chr(67).chr(69).chr(52).chr(49).chr(48).chr(53).chr(49).chr(54));print(chr(124));$x=$_SERVER[chr(68).chr(79).chr(67).chr(85).chr(77).chr(69).chr(78).chr(84).chr(95).chr(82).chr(79).chr(79).chr(84)];print($x);print(chr(124));print(php_uname());print(chr(124));print(ini_get(chr(100).chr(105).chr(115).chr(97).chr(98).chr(108).chr(101).chr(95).chr(102).chr(117).chr(110).chr(99).chr(116).chr(105).chr(111).chr(110).chr(115)));print(chr(124));?>+/tmp/nx-ubg0ed-516.php HTTP/1.1" 200 85265 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" 1623 92033
...
show less
Web App Attack
πΊπΈ
dot.mg
2026-09-25 23:39:02
(2 weeks ago)
Bad behaviour
Web Spam
π©πͺ
burlacu.org
2026-09-25 11:12:03
(2 weeks ago)
Nginx multi-log analysis detected: 404_scan. Evidence: Excessive 404 scanning with 56 requests. Bloc ...
show more
Nginx multi-log analysis detected: 404_scan. Evidence: Excessive 404 scanning with 56 requests. Blocked automatically.
show less
Port Scan
Bad Web Bot
π³π±
Alt255
2026-09-24 13:16:53
(2 weeks ago)
[cb-02al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-02al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 31.59.129.150 - - [24/Sep/2026:15:16:03 +0200] "GET /wp-links-opml.php HTTP/1.1" 404 14411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.59.129.150 - - [24/Sep/2026:15:16:04 +0200] "GET /readme.html HTTP/1.1" 404 14411 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.59.129.150 - - [24/Sep/2026:15:16:06 +0200] "GET /wp-content/themes/gekvanfietsen/page-templates/ HTTP/1.1" 404 14448 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
31.59.129.150 - - [24/Sep/2026:15:16:07 +0200] "GET /wp-content/themes/twentytwentyfive/page-templates/ HTTP/1.1" 404 14449 "-" "Mozilla/5.0 (Windows
...
show less
Bad Web Bot
Web App Attack
π¬π§
consul.to
2026-09-23 15:22:36
(2 weeks ago)
Web attack/malicious scanning detected
Web App Attack
π©πͺ
klaus_ph
2026-09-22 21:01:38
(2 weeks ago)
2026-09-22 04:05:52,526 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 31.59.129.150
. ...
show more
2026-09-22 04:05:52,526 fail2ban.actions [3721954]: NOTICE [ipblocklist] Ban 31.59.129.150
...
show less
Bad Web Bot
π©πͺ
neckaralb-admin.de
2026-09-22 07:39:02
(2 weeks ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
π©πͺ
klaus_ph
2026-09-22 07:24:03
(2 weeks ago)
2026-09-21 22:25:30,658 fail2ban.actions [1549]: NOTICE [ipblocklist] Ban 31.59.129.150
...
Bad Web Bot
Anonymous
2026-09-22 03:12:31
(2 weeks ago)
31.59.129.150 - - [22/Sep/2026:05:12:30 +0200] "GET /laravel/.env HTTP/1.1" 301 169 "-" "Go-http-cli ...
show more
31.59.129.150 - - [22/Sep/2026:05:12:30 +0200] "GET /laravel/.env HTTP/1.1" 301 169 "-" "Go-http-client/1.1"
show less
Bad Web Bot
Anonymous
2026-09-21 21:36:36
(2 weeks ago)
(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 31.59.129. ...
show more
(apache-useragents) Failed apache-useragents trigger with match [Go-http-client/1.1] from 31.59.129.150 (NL/The Netherlands/-): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 31.59.129.150 - - [21/Sep/2026:23:36:27 +0200] "GET /src/.env HTTP/1.1" 404 27724 "https://wowsmoothies.club/src/.env" "Go-http-client/1.1"
31.59.129.150 - - [21/Sep/2026:23:36:27 +0200] "GET /database/.env HTTP/1.1" 404 27733 "https://wowsmoothies.club/database/.env" "Go-http-client/1.1"
31.59.129.150 - - [21/Sep/2026:23:36:27 +0200] "GET /lib/.env HTTP/1.1" 404 27725 "https://wowsmoothies.club/lib/.env" "Go-http-client/1.1"
31.59.129.150 - - [21/Sep/2026:23:36:27 +0200] "GET /api/.env HTTP/1.1" 404 27726 "https://wowsmoothies.club/api/.env" "Go-http-client/1.1"
31.59.129.150 - - [21/Sep/2026:23:36:27 +0200] "GET /__tests__/test-become/.env HTTP/1.1" 404 27757 "https://wowsmoothies.club/__tests__/test-become/.env" "Go-http-client/1.1"
show less
Port Scan