|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-14 UTC.
|
Brute-Force
|
|
🇬🇧
openstrike.co.uk
|
|
226 attacks on env grabbing URLs (type 2), shell probes, VC URLs, directory traversals, config grabbing URLs (type 2), env grabbing URLs, PHP URLs, password/key grabbing URLs:
GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HT ...
show more
226 attacks on env grabbing URLs (type 2), shell probes, VC URLs, directory traversals, config grabbing URLs (type 2), env grabbing URLs, PHP URLs, password/key grabbing URLs:
GET /public/plugins/alertlist/../../../../../../../../proc/self/environ HTTP/1.1
POST /cgi-bin/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/bin/sh HTTP/1.1
GET /.git/HEAD HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /config/environment.json HTTP/1.1
GET /conf/.env HTTP/1.1
POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1
GET /id_ecdsa HTTP/1.1
show less
|
Hacking
Web App Attack
|
|
🇳🇱
maxxsense
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.146.22.231 (JP/Japan/231.22.146.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇪🇸
robotstxt
|
|
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ ...
show more
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [14/Oct/2026:00:17:19 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
...
show less
|
Web Spam
Web App Attack
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
🇪🇸
robotstxt
|
|
34.146.22.231 - - [13/Oct/2026:21:24:42 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 189 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.146.22 ...
show more
34.146.22.231 - - [13/Oct/2026:21:24:42 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 189 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:21:24:42 +0000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:21:24:42 +0000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/1.1" 404 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:21:24:43 +0000] "POST /cgi-bin/php-cgi?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp://input HTTP/1.1" 404 1
...
show less
|
Bad Web Bot
|
|
🇬🇧
consul.to
|
|
Web attack/malicious scanning detected
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇩🇪
Petros Stefanakis
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.146.22.231 (JP/Japan/231.22.146.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇬🇧
gigatech
|
|
Webserver Probing
|
Web App Attack
|
|
🇪🇸
robotstxt
|
|
34.146.22.231 - - [13/Oct/2026:19:42:40 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:19:42:41 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
34.146.22.231 - - [13/Oct/2026:19:42:40 +0000] "GET /%2E%2E/%2E%2E/%2E%2E/%2E%2E/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:19:42:41 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:19:42:41 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:19:42:41 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
34.146.22.231 - - [13/Oct/2026:19:42:41 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.146.22.231"
...
show less
|
Web Spam
Web App Attack
|
|
🇨🇦
Dunham Support
|
|
(mod_security) mod_security triggered on hostname [redacted] 34.146.22.231 (JP/Japan/231.22.146.34.bc.googleusercontent.com)
|
SQL Injection
|
|
🇧🇪
cmbplf
|
|
327 requests with url.path */@fs/*
177 requests with url.path */proc/*
|
Brute-Force
Bad Web Bot
|
|
🇩🇪
tall1oN
|
|
34.146.22.231 - - [13/Oct/2026:21:29:07 +0200] "POST /graphql HTTP/2.0" 405 559 "https://exatek.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "exatek.de"
34.146.22.231 - - [13/Oc ...
show more
34.146.22.231 - - [13/Oct/2026:21:29:07 +0200] "POST /graphql HTTP/2.0" 405 559 "https://exatek.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "exatek.de"
34.146.22.231 - - [13/Oct/2026:21:29:07 +0200] "POST /api/graphql HTTP/2.0" 405 559 "https://exatek.de" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "exatek.de"
...
show less
|
Web App Attack
Port Scan
Hacking
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|