๐ซ๐ท
regishoussin
2026-09-18 12:35:08
(10 minutes ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of ...
show more
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-09-18 12:35 UTC.
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
WizardsToolkit
2026-09-18 12:32:44
(13 minutes ago)
tried to access forbidden files; attempted to access /.docker/laravel/app/.env
Web App Attack
๐ซ๐ฎ
oh.mg
2026-09-18 12:21:17
(24 minutes ago)
34.14.99.143 - - [18/Sep/2026:14:21:16 +0200] "GET /.env HTTP/1.1" 403 847 "-" "Mozilla/5.0 (Windows ...
show more
34.14.99.143 - - [18/Sep/2026:14:21:16 +0200] "GET /.env HTTP/1.1" 403 847 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:14:21:17 +0200] "GET /.docker/secrets.json HTTP/1.1" 403 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:14:21:17 +0200] "GET /.docker/laravel/app/.env HTTP/1.1" 403 832 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:14:21:17 +0200] "GET /.docker/.env HTTP/1.1" 403 508 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:14:21:17 +0200] "GET /.env-sample HTTP/1.1" 403 4454 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-09-18 12:20:20
(25 minutes ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
Victor Lรณpez
2026-09-18 11:33:30
(1 hour ago)
empresarioexpress.com 34.14.99.143 - - [18/Sep/2026:06:33:29 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozi ...
show more
empresarioexpress.com 34.14.99.143 - - [18/Sep/2026:06:33:29 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" -
empresarioexpress.com 34.14.99.143 - - [18/Sep/2026:06:33:29 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" -
empresarioexpress.com 34.14.99.143 - - [18/Sep/2026:06:33:30 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36" -
...
show less
Hacking
Web App Attack
Anonymous
2026-09-18 11:23:43
(1 hour ago)
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 885 "-" "Mozi ...
show more
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.aws/credentials.bak HTTP/1.1" 403 885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.aws/config HTTP/1.1" 403 900 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.env HTTP/1.1" 403 885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.config/gcloud/credentials.db HTTP/1.1" 403 885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.env-sample HTTP/1.1" 403 7911 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.env-example HTTP/1.1" 403 561 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
34.14.99.143 - - [18/Sep/2026:13:23:42 +0200] "GET /.env.example HTTP/1.1" 403 561 "
...
show less
DDoS Attack
๐ธ๐ช
EmK530
2026-09-18 11:17:49
(1 hour ago)
URL flagged by RegEx: /.aws/credentials
Web App Attack
Anonymous
2026-09-18 11:17:26
(1 hour ago)
2026/09/18 08:17:25 [error] 1513421#1513421: *1054 access forbidden by rule, client: 34.14.99.143, s ...
show more
2026/09/18 08:17:25 [error] 1513421#1513421: *1054 access forbidden by rule, client: 34.14.99.143, server: emissor.sorotop.com.br, request: "GET /.env HTTP/2.0", host: "emissor.sorotop.com.br"
2026/09/18 08:17:25 [error] 1513421#1513421: *1054 access forbidden by rule, client: 34.14.99.143, server: emissor.sorotop.com.br, request: "GET /.docker/laravel/app/.env HTTP/2.0", host: "emissor.sorotop.com.br"
2026/09/18 08:17:25 [error] 1513421#1513421: *1054 access forbidden by rule, client: 34.14.99.143, server: emissor.sorotop.com.br, request: "GET /.docker/.env HTTP/2.0", host: "emissor.sorotop.com.br"
...
show less
Port Scan
๐ฉ๐ช
svr
2026-09-18 11:08:59
(1 hour ago)
HC-Flood Web Scanner
Web App Attack
๐บ๐ธ
crooze.net
2026-09-18 11:03:57
(1 hour ago)
34.14.99.143 - - [18/Sep/2026:07:03:56 -0400] "GET /.git/HEAD HTTP/2.0" 404 41 "-" "Mozilla/5.0 (Win ...
show more
34.14.99.143 - - [18/Sep/2026:07:03:56 -0400] "GET /.git/HEAD HTTP/2.0" 404 41 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Web App Attack
๐จ๐ญ
m_vlasov
2026-09-18 11:01:56
(1 hour ago)
SSH/Telnet honeypot: 0 login attempts, 0 sessions, 0 shell commands.
Hacking
๐ณ๐ฑ
Savvii
2026-09-18 10:59:29
(1 hour ago)
20 attempts against mh-misbehave-ban on tilia
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-18 10:56:58
(1 hour ago)
732 limiting connections by zone (12m59s)
DDoS Attack
๐ฉ๐ฐ
HostingGroup
2026-09-18 10:41:54
(2 hours ago)
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shiel ...
show more
Automated malicious activity (Honeypot Trap) detected and blocked at the CDN edge by NordicCDN Shield. Offenses: 10. First blocked: 2026-09-18.
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
neckaralb-admin.de
2026-09-18 10:33:47
(2 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack