π«π·
SpaceHost-Server
2026-10-13 22:19:08
(4 hours ago)
Brute-Force
Web App Attack
π¦π²
arm osint
2026-10-13 05:55:42
(20 hours ago)
Automated web vulnerability scanning: 227 HTTP 4xx probes for sensitive paths (/%2Fadmin, /%2Fapi/co ...
show more
Automated web vulnerability scanning: 227 HTTP 4xx probes for sensitive paths (/%2Fadmin, /%2Fapi/config, /%2Fdashboard, /%2Fsettings). Detected by Wazuh HIDS rule 31151 on a self-hosted web server.
show less
Web App Attack
Brute-Force
π©πͺ
macrob
2026-10-13 00:58:53
(1 day ago)
2026/10/13 00:58:51 [error] 3179996#3179996: *45468688 access forbidden by rule, client: 34.104.146. ...
show more
2026/10/13 00:58:51 [error] 3179996#3179996: *45468688 access forbidden by rule, client: 34.104.146.111, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "argo.wellbin.org"
2026/10/13 00:58:51 [error] 3179998#3179998: *45468689 access forbidden by rule, client: 34.104.146.111, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "argo.wellbin.org"
2026/10/13 00:58:51 [error] 3179998#3179998: *45468685 access forbidden by rule, client: 34.104.146.111, server: fn.binixo.es, request: "GET /files../.env HTTP/2.0", host: "argo.wellbin.org"
...
show less
Web App Attack
π©πͺ
Gwyneth Llewelyn
2026-10-12 21:53:23
(1 day ago)
34.104.146.111 - - [12/Oct/2026:22:53:20 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d ...
show more
34.104.146.111 - - [12/Oct/2026:22:53:20 +0100] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 994 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
show less
Bad Web Bot
π¨π¦
SoteriaCovenant
2026-10-12 21:20:37
(1 day ago)
Automated probe: /cgi-bin/php on Soteria Global infrastructure. No vulnerable software present.
Hacking
π©πͺ
Gwyneth Llewelyn
2026-10-12 21:12:16
(1 day ago)
2026/10/12 22:12:14 [error] 4060694#4060694: *2616815 access forbidden by rule, client: 34.104.146.1 ...
show more
2026/10/12 22:12:14 [error] 4060694#4060694: *2616815 access forbidden by rule, client: 34.104.146.111, server: simetria.org, request: "GET /core/.env HTTP/2.0", host: "simetria.org"
2026/10/12 22:12:14 [error] 4060693#4060693: *2616811 access forbidden by rule, client: 34.104.146.111, server: simetria.org, request: "GET /build/.env HTTP/2.0", host: "simetria.org"
2026/10/12 22:12:14 [error] 4060693#4060693: *2616817 access forbidden by rule, client: 34.104.146.111, server: simetria.org, request: "GET /dist/.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack
π©πͺ
Teufel100
2026-10-12 21:07:41
(1 day ago)
ModSecurity rejected a query
Brute-Force
Hacking
Web App Attack
Anonymous
2026-10-12 20:54:07
(1 day ago)
Logfile match
Web App Attack
π³π±
Site.eu
2026-10-12 20:47:30
(1 day ago)
Excessive 404/403 errors
Brute-Force
π§πͺ
cmbplf
2026-10-12 20:44:50
(1 day ago)
912 requests with url.path */@fs/*
356 requests with url.path */proc/*
298 requests with url.path ...
show more
912 requests with url.path */@fs/*
356 requests with url.path */proc/*
298 requests with url.path *.ssh/*
184 requests with url.path *config.json
171 requests with url.path *.aws/*
show less
Brute-Force
Bad Web Bot
π©πͺ
Blexyel
2026-10-12 19:47:44
(1 day ago)
34.104.146.111 - - [12/Oct/2026:21:47:44 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 ...
show more
34.104.146.111 - - [12/Oct/2026:21:47:44 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
πΏπ¦
conure.sh
2026-10-12 19:13:09
(1 day ago)
csagent: score 17.2: 404 noise floor x29, secrets grab x1; 1 domain(s) in 2s
Web App Attack
Anonymous
2026-10-12 18:39:41
(1 day ago)
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla ...
show more
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 34.104.146.111
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" 34.104.146.111
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.104.146.111
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)" 34.104.146.111
34.104.146.111 - - [12/Oct/2026:13:38:11 -0500] "GET /.env.development?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Bytespider; [email protected] ) AppleWebKit/537.36" 34.104.146.111
34.104.146
...
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
SLSLLC
2026-10-12 18:23:30
(1 day ago)
34.104.146.111 - - [12/Oct/2026:18:23:29 +0000] "GET /.env?raw HTTP/2.0" 403 1858 "-" "Mozilla/5.0 ( ...
show more
34.104.146.111 - - [12/Oct/2026:18:23:29 +0000] "GET /.env?raw HTTP/2.0" 403 1858 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
Web App Attack
π¬π§
consul.to
2026-10-12 18:16:59
(1 day ago)
Web attack/malicious scanning detected
Web App Attack