🇹🇷
oalver
2026-10-01 23:55:12
(3 weeks ago)
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_auth_flood ...
show more
Detected by SiberKapan threat intelligence platform (siberkapan.org). Attack types: nginx_auth_flood. Sources: nginx. Details: auth_flood: 8 requests to /wp-json/gravitysmtp/v1/tests/mock-data?page=gravitysmtp-settings (HTTP 403) within 60s. First seen: 2026-10-01. Risk score: 25/100.
show less
Brute-Force
Web App Attack
🇬🇧
consul.to
2026-10-01 23:50:16
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
Catalin Negru
2026-10-01 23:49:55
(3 weeks ago)
Recidive ban by fail2ban on server.blackbit.ro
Brute-Force
🇳🇱
homeshowdomain.nl
2026-10-01 21:59:04
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-30.
show less
Web App Attack
SSH
Hacking
2026-10-01 20:45:50
(3 weeks ago)
20.88.211.20 - - [02/Oct/2026:04:45:50 +0800] "GET /pathscan-3777ba88c59e-nope.env HTTP/1.1" 404 299 ...
show more
20.88.211.20 - - [02/Oct/2026:04:45:50 +0800] "GET /pathscan-3777ba88c59e-nope.env HTTP/1.1" 404 299882 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-10-01 20:09:45
(3 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-10-01 16:50:20
(3 weeks ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇦🇹
services.org.pl
2026-10-01 16:45:28
(3 weeks ago)
access forbidden by rule, client: 20.88.211.20, server: litellm.services.org.pl, request: "GET / HTT ...
show more
access forbidden by rule, client: 20.88.211.20, server: litellm.services.org.pl, request: "GET / HTTP/1.1", host: "litellm.services.org.pl"
show less
Bad Web Bot
Web App Attack
🇺🇸
wordpresshosting.solutions
2026-10-01 16:13:28
(3 weeks ago)
Web brute-force / failed auth detected. Evidence: [Thu Oct 01 16:13:27.959150 2026] [authz_core:erro ...
show more
Web brute-force / failed auth detected. Evidence: [Thu Oct 01 16:13:27.959150 2026] [authz_core:error] [pid 2448509] [client [IP]:0] AH01630: client [IP]nied by server configuration: [WEB_ROOT]/.env.txt
[Thu Oct 01 16:13:27.996247 2026] [authz_core:error] [pid 2448559] [client [IP]:0] AH01630: client [IP]nied by server configuration: [WEB_ROOT]/.env.txt
show less
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-10-01 15:56:51
(3 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: db.goblinpot.website | URI: /.env.swp | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-10-01 12:44:32
(3 weeks ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.88.211.20 (US/United States/-): 1 in ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 20.88.211.20 (US/United States/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 20.88.211.20 - - [01/Oct/2026:14:44:28 +0200] "GET /pathscan-6f9857aaef53-nope.env HTTP/1.1" 200 12016 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36" "-" host=hosting.mediaqualitylab.com
show less
Port Scan
🇳🇱
e.fierstra
2026-10-01 12:43:49
(3 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇧🇪
taivas.nl
2026-10-01 10:02:13
(3 weeks ago)
Bad_requests
Bad Web Bot
🇳🇱
Alt255
2026-10-01 03:09:52
(3 weeks ago)
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 20.88.211.20 - - [01/Oct/2026:05:09:44 +0200] "GET /.git/config HTTP/1.1" 404 2083 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-01 02:53:55
(3 weeks ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking