🇺🇸
1cyb3rpunk
2026-10-19 20:13:15
(1 week ago)
Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_prob ...
show more
Coordinated campaign CMP-1786835248-000: 1782 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
1cyb3rpunk
2026-10-15 03:07:29
(1 week ago)
Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_prob ...
show more
Coordinated campaign CMP-1786835248-000: 1425 IPs sharing an attack fingerprint (acme_challenge_probe, admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
1cyb3rpunk
2026-10-02 14:09:40
(3 weeks ago)
Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, ...
show more
Coordinated campaign CMP-1786835248-000: 1140 IPs sharing an attack fingerprint (admin_panel_probe, asset_directory_probe, attacker_objective_inferred, aws_creds_file_probe, aws_imds_probe, backup_file_probe). Observed on sectrace.org honeypot surface.
show less
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-29 22:16:59
(3 weeks ago)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-29 13:16:24
(3 weeks ago)
Excessive multi-domain requests
Brute-Force
🇳🇱
Alt255
2026-09-29 09:52:23
(3 weeks ago)
[ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 136 ...
show more
[ti-12al] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 136.118.219.35 - - \[29/Sep/2026:11:52:20 +0200\] "GET /userfiles\?path=../../../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\; compatible\; PerplexityBot/1.0\; +https://perplexity.ai/perplexitybot\)"
136.118.219.35 - - \[29/Sep/2026:11:52:20 +0200\] "GET /userfiles\?path=../../.env HTTP/2.0" 404 1863 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/605.1.15 \(KHTML, like Gecko\) Version/17.0 Safari/605.1.15 \(Applebot/0.1\)"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-09-29 09:33:09
(3 weeks ago)
2026/09/29 09:33:07 [error] 611560#611560: *48519616 access forbidden by rule, client: 136.118.219.3 ...
show more
2026/09/29 09:33:07 [error] 611560#611560: *48519616 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "download.wellbin.org"
2026/09/29 09:33:07 [error] 611560#611560: *48519617 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "download.wellbin.org"
2026/09/29 09:33:07 [error] 611560#611560: *48519624 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "download.wellbin.org"
...
show less
Web App Attack
🇦🇲
arm osint
2026-09-29 07:56:07
(3 weeks ago)
Automated web vulnerability scanning: 254 HTTP 4xx probes for sensitive paths (/api/templates/previe ...
show more
Automated web vulnerability scanning: 254 HTTP 4xx probes for sensitive paths (/api/templates/preview, /read-document, /.//.env, /.aws/config). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
🇬🇧
consul.to
2026-09-29 06:52:08
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
macrob
2026-09-29 05:13:46
(4 weeks ago)
2026/09/29 05:13:45 [error] 538677#538677: *47791207 access forbidden by rule, client: 136.118.219.3 ...
show more
2026/09/29 05:13:45 [error] 538677#538677: *47791207 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "docs.wellbin.org"
2026/09/29 05:13:45 [error] 538677#538677: *47791210 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "docs.wellbin.org"
2026/09/29 05:13:45 [error] 538676#538676: *47791215 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /config/env/aws_credentials.env HTTP/2.0", host: "docs.wellbin.org"
...
show less
Web App Attack
🇩🇪
ITSNF
2026-09-29 03:50:10
(4 weeks ago)
Blocked by os-abuseipdb; 11 hits, proto=tcp, ports=443,80,8080,8443
Port Scan
Hacking
🇫🇷
dynamix
2026-09-29 03:08:46
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇩🇪
macrob
2026-09-29 02:02:45
(4 weeks ago)
2026/09/29 02:02:44 [error] 273522#273522: *47386736 access forbidden by rule, client: 136.118.219.3 ...
show more
2026/09/29 02:02:44 [error] 273522#273522: *47386736 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "dev-web.wellbin.org"
2026/09/29 02:02:44 [error] 273523#273523: *47386735 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "dev-web.wellbin.org"
2026/09/29 02:02:44 [error] 273522#273522: *47386751 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /src/.env HTTP/2.0", host: "dev-web.wellbin.org"
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-28 22:16:26
(4 weeks ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-09-28 13:06:12
(4 weeks ago)
2026/09/28 13:06:11 [error] 88269#88269: *45412343 access forbidden by rule, client: 136.118.219.35, ...
show more
2026/09/28 13:06:11 [error] 88269#88269: *45412343 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "app-test.smoozy.org"
2026/09/28 13:06:11 [error] 88269#88269: *45412348 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "app-test.smoozy.org"
2026/09/28 13:06:11 [error] 88269#88269: *45412362 access forbidden by rule, client: 136.118.219.35, server: fn.binixo.es, request: "GET /.env.bak HTTP/2.0", host: "app-test.smoozy.org"
...
show less
Web App Attack