🇩🇪
Holger
2026-10-16 23:24:29
(12 hours ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇩🇪
Holger
2026-10-14 06:18:34
(3 days ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-10-14 02:29:38
(3 days ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
MBombeck
2026-10-14 00:53:27
(3 days ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇷🇸
pexodelic
2026-10-13 05:45:23
(4 days ago)
Automated report from web, SSH and FTP server logs: 2394 requests probing for exposed secrets (.env, ...
show more
Automated report from web, SSH and FTP server logs: 2394 requests probing for exposed secrets (.env, .git, config files). First reported 2026-10-12 16:05 UTC, last reported 2026-10-13 05:35 UTC; counts cover the current log rotation window.
show less
Hacking
Web App Attack
🇨🇭
🇨🇭 Hosting
2026-10-13 05:10:11
(4 days ago)
Automated WAF report: 700-800 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
2026-10-13 00:23:31
(4 days ago)
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2 ...
show more
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /static/../../../a/../../../../.env HTTP/2.0" 400 295 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /api%2F.env HTTP/2.0" 404 265 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)"
34.185.139.81 - - [13/Oct/2026:02:23:31 +0200] "GET /dashboard%2F.env HTT
...
show less
Brute-Force
SSH
🇿🇦
conure.sh
2026-10-12 22:51:03
(4 days ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 1s
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-12 22:16:03
(4 days ago)
2026/10/12 23:16:01 [error] 4060695#4060695: *2633181 access forbidden by rule, client: 34.185.139.8 ...
show more
2026/10/12 23:16:01 [error] 4060695#4060695: *2633181 access forbidden by rule, client: 34.185.139.81, server: alzulej.pt, request: "GET /autodiscover.xml/app/..;/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/app/..;/.env"
2026/10/12 23:16:01 [error] 4060695#4060695: *2633181 access forbidden by rule, client: 34.185.139.81, server: alzulej.pt, request: "GET /autodiscover.xml/static../.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/static../.env"
2026/10/12 23:16:01 [error] 4060695#4060695: *2633181 access forbidden by rule, client: 34.185.139.81, server: alzulej.pt, request: "GET /autodiscover.xml/api/..;/.env HTTP/2.0", host: "alzulej.pt", referrer: "https://autodiscover.alzulej.pt/api/..;/.env"
show less
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-10-12 21:47:06
(4 days ago)
381 requests with url.path */@fs/*
189 requests with url.path */proc/*
117 requests with url.path ...
show more
381 requests with url.path */@fs/*
189 requests with url.path */proc/*
117 requests with url.path *.ssh/*
show less
Brute-Force
Bad Web Bot
2026-10-12 21:32:31
(4 days ago)
[Mon Oct 12 22:32:30.926411 2026] [proxy_fcgi:error] [pid 1068:tid 1082] [remote 34.185.139.81:57382 ...
show more
[Mon Oct 12 22:32:30.926411 2026] [proxy_fcgi:error] [pid 1068:tid 1082] [remote 34.185.139.81:57382] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
🇺🇸
proactive-noc
2026-10-12 21:27:25
(4 days ago)
Web application abuse detected 11 times recently; honeypot-j.
Hacking
Web App Attack
🇺🇸
proactive-noc
2026-10-12 21:25:11
(4 days ago)
Web application abuse detected 40 times recently; honeypot-j.
Hacking
Web App Attack
🇫🇷
phoenix1jl96
2026-10-12 21:16:29
(4 days ago)
2026/10/12 23:16:28 [error] 801916#801916: *159913 open() "/home/user-data/www/default/cgi-bin/php-c ...
show more
2026/10/12 23:16:28 [error] 801916#801916: *159913 open() "/home/user-data/www/default/cgi-bin/php-cgi.exe" failed (2: No such file or directory), client: 34.185.139.81, server: autoconfig.epouville.info, request: "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0", host: "autoconfig.epouville.info"
2026/10/12 23:16:28 [error] 801916#801916: *159913 open() "/home/user-data/www/default/cgi-bin/php" failed (2: No such file or directory), client: 34.185.139.81, server: autoconfig.epouville.info, request: "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0", host: "autoconfig.epouville.info"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
🇧🇾
lns.bz
2026-10-12 20:50:22
(4 days ago)
Too many 404 requests [BY]
Web App Attack