๐ฉ๐ช
Philister11
2026-09-25 00:31:43
(29 minutes ago)
CrowdSec: crowdsecurity/http-cve-2021-41773 (BE/AS396982)
Web App Attack
Hacking
๐ฉ๐ช
snhosting
2026-09-24 18:52:51
(6 hours ago)
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 200 1606 "-" "Mo ...
show more
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /@fs/app/.env?raw?? HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /config/env/aws_credentials.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /@fs/../.env?raw?? HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; PanguBot/1.0; +https://www.huaweicloud.com/)"
146.148.121.136 - - [24/Sep/2026:20:52:24 +0200] "GET /@fs/..%252f..%252f..%252f..%252f..%252froot/.env?raw?? HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
Marc
2026-09-24 18:50:26
(6 hours ago)
146.148.121.136 - - [24/Sep/2026:20:50:25 +0200] "GET /z9x8c7v6b5-debug-trigger-test.marcrisse.de HT ...
show more
146.148.121.136 - - [24/Sep/2026:20:50:25 +0200] "GET /z9x8c7v6b5-debug-trigger-test.marcrisse.de HTTP/2.0" 404 291 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" 146.148.121.136 - - [24/Sep/2026:20:50:25 +0200] "GET /login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" 146.148.121.136 - - [24/Sep/2026:20:50:25 +0200] "GET /signin HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
show less
Brute-Force
๐ฉ๐ช
rh24
2026-09-24 18:30:03
(6 hours ago)
Blacklisted for CAPTCHA_DOS_ALERT after 101 captcha requests
DDoS Attack
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-24 17:10:47
(7 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ฉ๐ช
wpadm4
2026-09-24 08:44:51
(16 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-09-24 07:51:03
(17 hours ago)
Web App Attack
๐ฉ๐ช
itsolon
2026-09-24 07:00:27
(18 hours ago)
[24/Sep/2026:09:00:27 +0200] 179023322783.390315 146.148.121.136 0 217.154.7.177 443
[24/Sep/2026:09 ...
show more
[24/Sep/2026:09:00:27 +0200] 179023322783.390315 146.148.121.136 0 217.154.7.177 443
[24/Sep/2026:09:00:27 +0200] 179023322758.446434 146.148.121.136 0 217.154.7.177 443
[24/Sep/2026:09:00:27 +0200] 179023322756.045623 146.148.121.136 0 217.154.7.177 443
[24/Sep/2026:09:00:27 +0200] 179023322783.756145 146.148.121.136 0 217.154.7.177 443
[24/Sep/2026:09:00:27 +0200] 179023322762.858970 146.148.121.136 0 217.154.7.177 443
...
show less
Port Scan
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-24 06:54:18
(18 hours ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Nevermind
2026-09-24 06:52:59
(18 hours ago)
146.148.121.136 - - [24/Sep/2026:08:52:58 +0200] "GET /.npmrc HTTP/1.1" 404 6291 "-" "Mozilla/5.0 (c ...
show more
146.148.121.136 - - [24/Sep/2026:08:52:58 +0200] "GET /.npmrc HTTP/1.1" 404 6291 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
146.148.121.136 - - [24/Sep/2026:08:52:58 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
146.148.121.136 - - [24/Sep/2026:08:52:58 +0200] "GET /wp-config.php.old HTTP/1.1" 403 6278 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
146.148.121.136 - - [24/Sep/2026:08:52:58 +0200] "GET /laravel/.env HTTP/1.1" 403 6278 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot"
...
show less
Web App Attack
๐ฎ๐ณ
evicky2002
2026-09-24 06:00:03
(19 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฉ๐ช
laotuo
2026-09-24 05:29:13
(19 hours ago)
146.148.121.136 - - [24/Sep/2026:07:29:13 +0200] "GET /gcp-key.json HTTP/1.1" 301 6262 "-" "Mozilla/ ...
show more
146.148.121.136 - - [24/Sep/2026:07:29:13 +0200] "GET /gcp-key.json HTTP/1.1" 301 6262 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
show less
Bad Web Bot
๐ฉ๐ช
ghostwarriors
2026-09-24 05:20:06
(19 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
netman
2026-09-24 05:10:25
(19 hours ago)
HTTP: 146.148.121.136 blocked because of 100 failures
...
DDoS Attack
Web App Attack
๐ง๐ช
taivas.nl
2026-09-24 04:33:13
(20 hours ago)
Many_bad_calls
Web App Attack