🇧🇷
ICS Labs
2026-10-14 15:18:07
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Hacking. Last observed 2026-10-14 UTC.
Hacking
🇫🇷
spongebob1234
2026-10-14 05:54:58
(2 days ago)
Wazuh SIEM: 121 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : ...
show more
Wazuh SIEM: 121 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Bad Bot / Scanner), Web (Bot d'indexation / Crawler), Web (Erreur 403 Interdit).
show less
Port Scan
Hacking
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-10-14 03:33:39
(3 days ago)
34.179.197.79 - - [14/Oct/2026:06:33:38 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///ro ...
show more
34.179.197.79 - - [14/Oct/2026:06:33:38 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
34.179.197.79 - - [14/Oct/2026:06:33:38 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-10-13 23:48:52
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇫🇮
6kilowatti
2026-10-13 22:33:32
(3 days ago)
[13/Oct/2026:22:33:31 +0000] - 403 403 - GET https mummo.6kw.fi "/.env.supabase" [Client 34.179.197. ...
show more
[13/Oct/2026:22:33:31 +0000] - 403 403 - GET https mummo.6kw.fi "/.env.supabase" [Client 34.179.197.79] [Length 125] [Gzip -] [Sent-to 10.144.0.10] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot" "-"
[13/Oct/2026:22:33:31 +0000] - 403 403 - GET https mummo.6kw.fi "/.git/HEAD" [Client 34.179.197.79] [Length 125] [Gzip -] [Sent-to 10.144.0.10] "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)" "-"
...
show less
Web App Attack
Anonymous
2026-10-13 22:16:12
(3 days ago)
Bot / seems abusive / Apache connections: 25
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇳🇱
tr1n
2026-10-13 21:50:22
(3 days ago)
Triggered Cloudflare WAF (firewallManaged) from DE.
Action: BLOCK | ASN: 396982 (Google LLC) | Proto ...
show more
Triggered Cloudflare WAF (firewallManaged) from DE.
Action: BLOCK | ASN: 396982 (Google LLC) | Protocol: HTTP/2 (GET) | Endpoint: /.idea/WebServers.xml | Timestamp: 2026-10-13T21:50:22Z | UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
show less
Bad Web Bot
🇺🇸
Epimetheus
2026-10-13 21:12:29
(3 days ago)
Zombie network / Bot scanner detected:
[POST] /cgi-bin/php
[POST] /php-cgi/php-cgi.exe
[POST] /webh ...
show more
Zombie network / Bot scanner detected:
[POST] /cgi-bin/php
[POST] /php-cgi/php-cgi.exe
[POST] /webhook-test/
[POST] /flowise/api/v1/node-load-method/customMCP
[POST] /index.php
[POST] /exec-py
[GET] /samconfig.toml
[GET] /terraform.tfstate.backup
[GET] /api/fs/read
[GET] /config/.env.staging
[POST] /icecoder/lib/terminal-xhr.php
[GET] /Dockerrun.aws.json
[GET] /userfiles/x
[GET] /userfiles
[GET] /firebase-config.js
[GET] /conf/.env
[GET] /application/.env
[GET] /localhost.key
[GET] /common/.env
[POST] /langflow/api/v1/validate/code
[GET] /id_ecdsa
[GET] /userfiles/x
[GET] /.env.sendgrid
[POST] /read-document
[GET] /supabase/.env
[GET] /firebase-credentials.json
[GET] /config/env/aws_credentials.env
[GET] /var/run/secrets/kubernetes.io/serviceaccount/token
[DELETE] /api/inngest
[GET] /docker-compose.production.yml
[GET] /.gitconfig
[GET] /userfiles
[GET] /host.key
[GET] /google-service-account.json
[GET] /.env.mail
[GET] /workspace/.env
[GET] /cms/.env
[GET] /api/system/
...(Truncated)
show less
Bad Web Bot
Exploited Host
Web App Attack
🇪🇸
robotstxt
2026-10-13 21:02:46
(3 days ago)
34.179.197.79 - - [13/Oct/2026:21:01:44 +0000] "GET /webpack-stats.json HTTP/2.0" 403 34512 "https:/ ...
show more
34.179.197.79 - - [13/Oct/2026:21:01:44 +0000] "GET /webpack-stats.json HTTP/2.0" 403 34512 "https://ccoo.cat/webpack-stats.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.179.197.79" edge="162.158.110.49"
34.179.197.79 - - [13/Oct/2026:21:01:44 +0000] "GET /assets/manifest.json HTTP/2.0" 403 34522 "https://ccoo.cat/assets/manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.179.197.79" edge="162.158.110.49"
34.179.197.79 - - [13/Oct/2026:21:01:44 +0000] "GET /asset-manifest.json HTTP/2.0" 403 34489 "https://ccoo.cat/asset-manifest.json" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36 EdgA/152.0.0.0" "34.179.197.79" edge="162.158.110.49"
34.179.197.79 - - [13/Oct/2026:21:01:44 +0000] "GET /static/manifest.json HTTP/2.0" 403 34527 "https://
...
show less
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-13 20:34:25
(3 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇮🇩
zam
2026-10-13 20:28:16
(3 days ago)
34.179.197.79 - - [13/Oct/2026:20:28:11 +0000] "GET /admin%2F.env HTTP/1.1" 404 236
34.179.197.79 - ...
show more
34.179.197.79 - - [13/Oct/2026:20:28:11 +0000] "GET /admin%2F.env HTTP/1.1" 404 236
34.179.197.79 - - [13/Oct/2026:20:28:11 +0000] "GET /api%2F.env HTTP/1.1" 404 236
34.179.197.79 - - [13/Oct/2026:20:28:11 +0000] "GET /dashboard%2F.env HTTP/1.1" 404 236
34.179.197.79 - - [13/Oct/2026:20:28:11 +0000] "GET /settings%2F.env HTTP/1.1" 404 236
34.179.197.79 - - [13/Oct/2026:20:28:12 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 404 236
34.179.197.79 - - [13/Oct/2026:20:28:14 +0000] "GET /api/orders/..%2f..%2f.env HTTP/1.1" 404 236
show less
Web App Attack
🇺🇸
zcampbell
2026-10-13 19:03:46
(3 days ago)
Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automat ...
show more
Web vulnerability scanning: probing for exposed sensitive files (.git). Detected and blocked automatically.
show less
Web App Attack
Bad Web Bot
🇩🇪
auridh
2026-10-13 18:05:15
(3 days ago)
Ip 34.179.197.79 performed 'crowdsecurity/appsec-vpatch' (2 events over 3.833237341s) at 2026-10-13 ...
show more
Ip 34.179.197.79 performed 'crowdsecurity/appsec-vpatch' (2 events over 3.833237341s) at 2026-10-13 18:05:15.450454558 +0000 UTC
Ip 34.179.197.79 performed 'crowdsecurity/http-crawl-non_statics' (42 events over 962.040713ms) at 2026-10-13 18:05:12.833641897 +0000 UTC
Ip 34.179.197.79 performed 'crowdsecurity/http-path-traversal-probing' (4 events over 520.391437ms) at 2026-10-13 18:05:13.346247703 +0000 UTC
Ip 34.179.197.79 performed 'crowdsecurity/http-probing' (11 events over 665.969546ms) at 2026-10-13 18:05:12.537248557 +0000 UTC
Ip 34.179.197.79 performed 'crowdsecurity/http-sensitive-files' (5 events over 10.567464ms) at 2026-10-13 18:05:12.294394404 +0000 UTC
WAF block: crowdsecurity/vpatch-CVE-2024-4577 from 34.179.197.79 ([REDACTED]) (3 alerts)
WAF block: crowdsecurity/vpatch-CVE-2025-29927 from 34.179.197.79 ([REDACTED]) (145 alerts)
show less
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-13 17:33:59
(3 days ago)
360 requests with url.path */@fs/*
108 requests with url.path *.ssh/*
Brute-Force
Bad Web Bot
Anonymous
2026-10-13 17:31:51
(3 days ago)
Unauthorized server file access attempt.
Hacking