🇩🇪
CELOS-SOC
2026-07-09 08:30:57
(2 weeks ago)
Multiple Unauthorized SSLVPN Login Attempts
Hacking
Brute-Force
🇩🇪
ValtonTahiri
2026-04-05 11:08:09
(3 months ago)
Honeypot hit: HTTP GET http://[SOME-IP]/
URL: http://[SOME-IP]/
Method: GET
Status: 200
User-agent: ...
show more
Honeypot hit: HTTP GET http://[SOME-IP]/
URL: http://[SOME-IP]/
Method: GET
Status: 200
User-agent: https://mob.army - announcing the new Dalai Llama (the last panchen was [reportedly] kidnapped the current is compromised) and showing off some of our domestic US blackops! (we making him MORMON!)
Host: [SOME-IP]
Other Headers: connection: close
show less
Hacking
Bad Web Bot
🇹🇷
rtbh.com.tr
2026-03-13 20:12:02
(4 months ago)
list.rtbh.com.tr report: tcp/0
Brute-Force
🇫🇮
geot
2026-03-12 17:08:47
(4 months ago)
GET /vendor/.env HTTP/1.1
GET /admin/.env HTTP/1.1
GET /.env HTTP/1.1
POST / HTTP/1.1
GET /<<removed ...
show more
GET /vendor/.env HTTP/1.1
GET /admin/.env HTTP/1.1
GET /.env HTTP/1.1
POST / HTTP/1.1
GET /<<removed>>/.env HTTP/1.1
show less
Port Scan
Hacking
Web App Attack
2026-03-12 08:46:18
(4 months ago)
"GET /.env HTTP/1.1"
Hacking
Web App Attack
🇫🇮
diego021
2026-03-12 00:51:41
(4 months ago)
173.249.253.193 135.181.251.148 - [11/Mar/2026:19:51:37 -0500] "POST / HTTP/1.1" 403 233 "-" "Mozill ...
show more
173.249.253.193 135.181.251.148 - [11/Mar/2026:19:51:37 -0500] "POST / HTTP/1.1" 403 233 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
173.249.253.193 135.181.251.148 - [11/Mar/2026:19:51:38 -0500] "POST / HTTP/1.1" 403 233 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
173.249.253.193 135.181.251.148 - [11/Mar/2026:19:51:38 -0500] "GET /.env HTTP/1.1" 404 233 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
173.249.253.193 135.181.251.148 - [11/Mar/2026:19:51:38 -0500] "GET /.env HTTP/1.1" 404 233 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
...
show less
Web App Attack
🇫🇷
masterguru
2026-03-12 00:39:35
(4 months ago)
Host header is a numeric IP address. Pattern match "^ (920350-135)
Hacking
Bad Web Bot
🇩🇪
ut-addicted.com
2026-03-11 22:58:49
(4 months ago)
\[Wed Mar 11 23:58:47.684701 2026\] \[:error\] \[pid 6447:tid 140545993144064\] \[client 173.249.253 ...
show more
\[Wed Mar 11 23:58:47.684701 2026\] \[:error\] \[pid 6447:tid 140545993144064\] \[client 173.249.253.193:59023\] \[client 173.249.253.193\] ModSecurity: Access denied with code 403 \(phase 2\). Operator GE matched 5 at TX:anomaly_score. \[file "/usr/local/apache/modsecurity-owasp-latest/rules/REQUEST-949-BLOCKING-EVALUATION.conf"\] \[line "57"\] \[id "949110"\] \[msg "Inbound Anomaly Score Exceeded \(Total Score: 8\)"\] \[severity "CRITICAL"\] \[tag "application-multi"\] \[tag "language-multi"\] \[tag "platform-multi"\] \[tag "attack-generic"\] \[hostname "78.46.187.162"\] \[uri "/.env"\] \[unique_id "abHzp-qG3tFdkP@FyrdDSgAAANA"\]
show less
Brute-Force
Web App Attack
2026-03-11 22:26:33
(4 months ago)
git/env leak probe
Web App Attack
2026-03-11 21:58:30
(4 months ago)
[11/Mar/2026:23:58:27 +0200] 177326630716.749423 173.249.253.193 64762 148.251.76.218 80
[11/Mar/202 ...
show more
[11/Mar/2026:23:58:27 +0200] 177326630716.749423 173.249.253.193 64762 148.251.76.218 80
[11/Mar/2026:23:58:29 +0200] 177326630930.656034 173.249.253.193 49593 148.251.76.218 443
show less
Web App Attack
🇩🇪
bescared
2026-03-11 21:44:10
(4 months ago)
F2B - Malicious activity detected. URL Probing.
Hacking
Web App Attack
🇩🇪
Hugopvigo
2026-03-11 21:41:50
(4 months ago)
"2026-03-11 21:41:50+00:00 173.249.253.193 IP con score alto (100) detectada en el log."
Brute-Force
SSH
2026-03-11 21:38:09
(4 months ago)
173.249.253.193 - - [11/Mar/2026:22:38:08 +0100] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Maci ...
show more
173.249.253.193 - - [11/Mar/2026:22:38:08 +0100] "GET /.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36"
show less
Web App Attack
🇳🇱
debestelapp
2026-03-11 21:19:51
(4 months ago)
Web App Attack
🇺🇸
Starburst SysOp Team
2026-03-11 20:53:47
(4 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-stl2-17)
Hacking
Bad Web Bot