🇩🇪
YF
2026-09-07 10:00:15
(4 hours ago)
Environment file probe
Web App Attack
🇩🇪
JLKnoch Software GmbH
2026-09-07 09:39:08
(5 hours ago)
CrowdSec crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
stvnrdg.me
2026-09-07 09:11:18
(5 hours ago)
140.245.110.72 - - [07/Sep/2026:09:11:18 +0000] "GET /wp-login.php HTTP/1.1" 404 374 "-" "Mozilla/5. ...
show more
140.245.110.72 - - [07/Sep/2026:09:11:18 +0000] "GET /wp-login.php HTTP/1.1" 404 374 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Hacking
🇺🇸
aks4226
2026-09-07 08:47:20
(6 hours ago)
Attacking common web applications. (n01)
Web App Attack
Anonymous
2026-09-07 08:24:07
(6 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
Anonymous
2026-09-07 08:22:31
(6 hours ago)
140.245.110.72 detected and blocked by apache-modsecurity after 1 try
Brute-Force
🇬🇧
Smish
2026-09-07 08:16:12
(6 hours ago)
HONEYPOT HIT --> Fail2ban time=1788768970 log=2026-09-07T09:16:10+01:00 ip=140.245.110.72 host=89.39 ...
show more
HONEYPOT HIT --> Fail2ban time=1788768970 log=2026-09-07T09:16:10+01:00 ip=140.245.110.72 host=89.39.211.6 method=GET uri="/.env" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" ref="-" rid=ae339088d2adea82599d4a3d24a117f3
show less
Web App Attack
🇫🇷
polarolouis
2026-09-07 08:12:45
(6 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇮
23p02732
2026-09-07 08:03:51
(6 hours ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
🇫🇷
guillaume illien
2026-09-07 07:55:18
(6 hours ago)
140.245.110.72 - - [07/Sep/2026:07:55:15 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows N ...
show more
140.245.110.72 - - [07/Sep/2026:07:55:15 +0000] "GET / HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.110.72 - - [07/Sep/2026:07:55:15 +0000] "GET /.env.production HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.110.72 - - [07/Sep/2026:07:55:17 +0000] "GET /.env.example HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.110.72 - - [07/Sep/2026:07:55:17 +0000] "GET /.env.local HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
140.245.110.72 - - [07/Sep/2026:07:55:17 +0000] "GET /.env.bak HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Hacking
Brute-Force
Web App Attack
SSH
Anonymous
2026-09-07 07:35:17
(7 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
Anonymous
2026-09-07 07:30:03
(7 hours ago)
Unauthorized SSH login attempts
Brute-Force
SSH
🇵🇱
webadmin
2026-09-05 05:51:38
(2 days ago)
2026-09-05T07:51:37.179915+02:00 tytan csmpro-api[3056]: [error] client: 140.245.110.72 server: 195. ...
show more
2026-09-05T07:51:37.179915+02:00 tytan csmpro-api[3056]: [error] client: 140.245.110.72 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/ [404]: Not Found
2026-09-05T07:51:37.723081+02:00 tytan csmpro-api[3056]: [error] client: 140.245.110.72 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/.env.production [404]: Not Found
2026-09-05T07:51:37.723081+02:00 tytan csmpro-api[3056]: [error] client: 140.245.110.72 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/.env.example [404]: Not Found
2026-09-05T07:51:37.723081+02:00 tytan csmpro-api[3056]: [error] client: 140.245.110.72 server: 195.116.29.58, request: "GET", url: http://195.116.29.58/.env [404]: Not Found
show less
Web App Attack
🇩🇪
maxpower
2026-09-05 05:32:28
(2 days ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 140.245.110.72 (SG/Singapore/-): 1 in th ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 140.245.110.72 (SG/Singapore/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 140.245.110.72 - - [05/Sep/2026:07:32:22 +0200] "GET /.aws/credentials HTTP/1.1" 200 4730 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" host=145.239.233.176
show less
Port Scan
Anonymous
2026-09-05 05:31:43
(2 days ago)
[05/Sep/2026:15:31:42 +1000] "GET /.env.production HTTP/1.1" 301 296 "Mozilla/5.0 (Windows NT 10.0; ...
show more
[05/Sep/2026:15:31:42 +1000] "GET /.env.production HTTP/1.1" 301 296 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
show less
Hacking
Web App Attack