🇵🇱
dzpk
2026-09-07 04:45:27
(15 hours ago)
136.65.147.206 - - [06/Sep/2026:18:40:24 +0200] "GET /wp-json HTTP/2.0" 404 848 "-" "DuckAssistBot/1 ...
show more
136.65.147.206 - - [06/Sep/2026:18:40:24 +0200] "GET /wp-json HTTP/2.0" 404 848 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
show less
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-07 02:17:29
(18 hours ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-09-07 01:33:37
(19 hours ago)
Login credentials theft attempt
Hacking
🇩🇪
bryth
2026-09-07 00:38:45
(19 hours ago)
Wordpress login/xmlrpc abuse (Mon Sep 7 12:21:10 AM UTC 2026)
Hacking
Web App Attack
🇺🇸
H24
2026-09-07 00:35:22
(20 hours ago)
/@fs/src/.env /.aws/credentials /static//home/user/.env /.//.env /files../.env /static//app/.env /_n ...
show more
/@fs/src/.env /.aws/credentials /static//home/user/.env /.//.env /files../.env /static//app/.env /_nuxt/../.env /media../.env /@fs/app/.env /static../.env
show less
Web App Attack
🇺🇸
Secure Gateway®️
2026-09-06 22:00:25
(22 hours ago)
Report By Secure Gateway Security Team: Suspicious File Upload Attempt
Web App Attack
🇺🇸
ALSCO®️
2026-09-06 22:00:25
(22 hours ago)
Report By ALSCO Security Team: Suspicious File Upload Attempt
SQL Injection
🇷🇴
clauss
2026-09-06 19:50:53
(1 day ago)
136.65.147.206 - - [06/Sep/2026:22:50:53 +0300] "GET /secrets.yml HTTP/2.0" 404 7901 "-" "Mozilla/5. ...
show more
136.65.147.206 - - [06/Sep/2026:22:50:53 +0300] "GET /secrets.yml HTTP/2.0" 404 7901 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
136.65.147.206 - - [06/Sep/2026:22:50:53 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
...
show less
Web App Attack
🇪🇸
el-brujo
2026-09-06 17:57:12
(1 day ago)
06/Sep/2026:19:57:11.913474 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
06/Sep/2026:19:57:11.913474 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 136.65.147.206] ModSecurity: Warning. Matched phrase ".aws/credentials" at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "125"] [id "930130"] [msg "Restricted File Access Attempt"] [data "Matched Data: .aws/credentials found within REQUEST_FILENAME: /@fs/home/ec2-user/.aws/credentials"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [tag "PCI/6.5.4"] [hostname "hwagm.elhacker.net"] [uri "/@fs/home/ec2-user/.aws/credentials"] [unique_id "ap2pd7bqgKuq2q1nxEDV1gAD4VI"]
...
show less
Hacking
Web App Attack
🇵🇱
dzpk
2026-09-06 16:40:24
(1 day ago)
[06/Sep/2026:18:40:21 +0200] 178871282170.354413 136.65.147.206 40552 HOST 443 [06/Sep/2026:18:40:23 ...
show more
[06/Sep/2026:18:40:21 +0200] 178871282170.354413 136.65.147.206 40552 HOST 443 [06/Sep/2026:18:40:23 +0200] 178871282314.337731 136.65.147.206 40552 HOST 443 [06/Sep/2026:18:40:23 +0200] 178871282356.065709 136.65.147.206 40552 HOST 443
show less
Web App Attack
🇩🇪
big-cloud.nl
2026-09-06 16:09:44
(1 day ago)
Try to access /static../.env
Web App Attack
🇪🇸
el-brujo
2026-09-06 14:57:17
(1 day ago)
136.65.147.206 - - [06/Sep/2026:16:57:17 +0200] "GET /build/manifest.json HTTP/2.0" 404 15908 "-" "M ...
show more
136.65.147.206 - - [06/Sep/2026:16:57:17 +0200] "GET /build/manifest.json HTTP/2.0" 404 15908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.65.147.206 - - [06/Sep/2026:16:57:17 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 15908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.65.147.206 - - [06/Sep/2026:16:57:17 +0200] "GET /dist/manifest.json HTTP/2.0" 404 15908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
136.65.147.206 - - [06/Sep/2026:16:57:17 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 15908 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
...
show less
Web App Attack
Hacking
🇺🇸
rdpguard.com
2026-09-06 14:21:28
(1 day ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
ghostwarriors
2026-09-06 13:20:14
(1 day ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ksol-hostmaster
2026-09-06 13:03:37
(1 day ago)
2026/09/06 15:03:35 [error] 19599#178749: *3149586 limiting requests, excess: 1.000 by zone "crawler ...
show more
2026/09/06 15:03:35 [error] 19599#178749: *3149586 limiting requests, excess: 1.000 by zone "crawler", client: 136.65.147.206, server: crxforum.ksol.io, request: "GET /@fs/src/.env?raw?? HTTP/2.0", host: "crxforum.ksol.io"
...
show less
Bad Web Bot