🇫🇷
SpaceHost-Server
2026-09-11 22:15:26
(1 day ago)
Brute-Force
Web App Attack
🇮🇳
evicky2002
2026-09-11 06:00:00
(2 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
H24
2026-09-11 05:28:49
(2 days ago)
/.aws/credentials /.git-credentials /.git/HEAD /.git/config
Web App Attack
🇫🇷
david.houstin
2026-09-11 05:18:47
(2 days ago)
136.92.21.245 - - [11/Sep/2026:07:18:37 +0200] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/2.0 ...
show more
136.92.21.245 - - [11/Sep/2026:07:18:37 +0200] "GET /@fs/home/ubuntu/.aws/credentials?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
136.92.21.245 - - [11/Sep/2026:07:18:37 +0200] "GET /img../.env HTTP/2.0" 404 264 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ChatGPT-User/1.0; +https://openai.com/bot)"
136.92.21.245 - - [11/Sep/2026:07:18:37 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
136.92.21.245 - - [11/Sep/2026:07:18:37 +0200] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/2.0" 404 264 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36"
136.92.21.245 - - [11/Sep/2026:07:18:45 +0200] "POST /api/graphql HTTP/2.0" 404 264 "https://heritier.xyz" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36"
136.92.21.245 - - [11/Sep/2026:07
...
show less
Web App Attack
Bad Web Bot
🇲🇾
Rizzy
2026-09-11 04:43:49
(2 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-09-11 03:32:33
(2 days ago)
311 requests with url.path *.ssh/*
Brute-Force
Bad Web Bot
🇫🇷
Baking333
2026-09-11 03:27:31
(2 days ago)
[redacted] 136.92.21.245 - - [11/Sep/2026:04:27:29 +0100] "GET /.aws/config HTTP/1.1" 302 1534 0/422 ...
show more
[redacted] 136.92.21.245 - - [11/Sep/2026:04:27:29 +0100] "GET /.aws/config HTTP/1.1" 302 1534 0/42246 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://[redacted]/perplexitybot)" [redacted] 136.92.21.245 - - [11/Sep/2026:04:27:29 +0100] "GET /.aws/credentials HTTP/1.1" 302 1534 0/47177 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://[redacted]/support/amazonbot)"
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-11 03:01:13
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
andypiper
2026-09-11 01:01:34
(2 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
Anonymous
2026-09-11 01:00:26
(2 days ago)
Banned by Fail2Ban on server
Web App Attack
🇩🇪
macrob
2026-09-11 00:14:44
(2 days ago)
2026/09/11 00:14:42 [error] 100825#100825: *682502 access forbidden by rule, client: 136.92.21.245, ...
show more
2026/09/11 00:14:42 [error] 100825#100825: *682502 access forbidden by rule, client: 136.92.21.245, server: finami.mx, request: "GET /admin%2F.env HTTP/2.0", host: "finami.mx"
2026/09/11 00:14:43 [error] 100825#100825: *682502 access forbidden by rule, client: 136.92.21.245, server: finami.mx, request: "GET /api%2F.env HTTP/2.0", host: "finami.mx"
2026/09/11 00:14:43 [error] 100825#100825: *682502 access forbidden by rule, client: 136.92.21.245, server: finami.mx, request: "GET /dashboard%2F.env HTTP/2.0", host: "finami.mx"
...
show less
Web App Attack
🇩🇪
FeG Deutschland
2026-09-11 00:12:06
(2 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇩🇪
Skyrider
2026-09-10 23:52:54
(2 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇪🇸
el-brujo
2026-09-10 23:40:38
(2 days ago)
136.92.21.245 - - [11/Sep/2026:01:40:37 +0200] "GET /rclone.conf HTTP/2.0" 404 15875 "-" "Mozilla/5. ...
show more
136.92.21.245 - - [11/Sep/2026:01:40:37 +0200] "GET /rclone.conf HTTP/2.0" 404 15875 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
136.92.21.245 - - [11/Sep/2026:01:40:37 +0200] "GET /.ssh/known_hosts HTTP/2.0" 404 15875 "-" "Mozilla/5.0 (compatible; YiBot/1.0; +https://01.ai/)"
136.92.21.245 - - [11/Sep/2026:01:40:37 +0200] "GET /z9x8c7v6b5-debug-trigger-elhacker.net HTTP/2.0" 404 15875 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
136.92.21.245 - - [11/Sep/2026:01:40:37 +0200] "GET /build/manifest.json HTTP/2.0" 404 15875 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36 Edg/152.0.0.0"
...
show less
Web App Attack
Hacking
🇸🇪
vaia.cloud
2026-09-10 23:35:01
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack