🇩🇪
macrob
2026-10-12 22:36:22
(3 hours ago)
2026/10/12 22:36:21 [error] 3179996#3179996: *45147557 access forbidden by rule, client: 34.104.158. ...
show more
2026/10/12 22:36:21 [error] 3179996#3179996: *45147557 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "api-dev.wellbin.org"
2026/10/12 22:36:21 [error] 3179996#3179996: *45147558 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "api-dev.wellbin.org"
2026/10/12 22:36:21 [error] 3179996#3179996: *45147543 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /assets../.env HTTP/2.0", host: "api-dev.wellbin.org"
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-12 22:18:33
(4 hours ago)
Brute-Force
Web App Attack
2026-10-12 21:22:21
(4 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-10-12 20:45:07
(5 hours ago)
905 requests with url.path */@fs/*
367 requests with url.path */proc/*
307 requests with url.path ...
show more
905 requests with url.path */@fs/*
367 requests with url.path */proc/*
307 requests with url.path *.ssh/*
184 requests with url.path *.aws/*
162 requests with url.path *config.json
show less
Brute-Force
Bad Web Bot
2026-10-12 20:40:45
(5 hours ago)
Sensitive file access attempt
Hacking
2026-10-12 20:38:32
(5 hours ago)
Fail2Ban apache-noscript
Bad Web Bot
🇨🇦
SoteriaCovenant
2026-10-12 20:25:38
(5 hours ago)
Automated probe: /console on Soteria Global infrastructure. No vulnerable software present.
Hacking
🇩🇪
macrob
2026-10-12 20:04:59
(6 hours ago)
2026/10/12 20:04:56 [error] 2896056#2896056: *44821480 access forbidden by rule, client: 34.104.158. ...
show more
2026/10/12 20:04:56 [error] 2896056#2896056: *44821480 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /.vite/manifest.json HTTP/2.0", host: "smoozy.org"
2026/10/12 20:04:56 [error] 2896052#2896052: *44821490 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "smoozy.org"
2026/10/12 20:04:57 [error] 2896052#2896052: *44821491 access forbidden by rule, client: 34.104.158.38, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "smoozy.org"
...
show less
Web App Attack
🇺🇸
FreeMyIP
2026-10-12 19:33:52
(6 hours ago)
Automated fail2ban report: web application attack / scanning for exploitable paths.
Bad Web Bot
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-12 19:33:23
(6 hours ago)
2026/10/12 20:33:10 [error] 4060693#4060693: *2593144 access forbidden by rule, client: 34.104.158.3 ...
show more
2026/10/12 20:33:10 [error] 4060693#4060693: *2593144 access forbidden by rule, client: 34.104.158.38, server: simetria.org, request: "GET /public.api/.env HTTP/2.0", host: "simetria.org"
2026/10/12 20:33:21 [error] 4060694#4060694: *2593139 access forbidden by rule, client: 34.104.158.38, server: simetria.org, request: "GET /....//....//....//..../.env HTTP/2.0", host: "simetria.org"
2026/10/12 20:33:21 [error] 4060693#4060693: *2593238 access forbidden by rule, client: 34.104.158.38, server: simetria.org, request: "GET /dashboard%2F.env HTTP/2.0", host: "simetria.org"
show less
Brute-Force
Web App Attack
🇺🇸
factor1
2026-10-12 19:03:01
(7 hours ago)
CrowdSec at saturn Reports Abuse
Web App Attack
🇬🇧
consul.to
2026-10-12 18:41:44
(7 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
1cyb3rpunk
2026-10-12 18:34:57
(7 hours ago)
Honeypot interaction [EXPLOIT]: php_webshell_probe on /lib/terminal-xhr.php. MITRE: T1204 (User Exec ...
show more
Honeypot interaction [EXPLOIT]: php_webshell_probe on /lib/terminal-xhr.php. MITRE: T1204 (User Execution). UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html). Observed on sectrace.org honeypot surface — automated scanner/attacker activity.
show less
Exploited Host
Hacking
🇺🇸
TPI-Abuse
2026-10-12 17:57:15
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.158.38 (38.158.104.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.158.38 (38.158.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 13:57:09.182153 2026] [security2:error] [pid 16056:tid 16056] [client 34.104.158.38:58628] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sandboxspeech.org"] [uri "/static//app/.env"] [unique_id "as0fddo9pSPmfyJSK0pzmwAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ardexter
2026-10-12 17:45:08
(8 hours ago)
Wordpress attack and DDOS
DDoS Attack
Web App Attack
