🇦🇹
piqwjdas
2026-09-09 07:55:06
(1 week ago)
{"transaction":{"client_ip":"34.39.235.134","time_stamp":"Wed Sep 9 09:55:04 2026","server_id":"468 ...
show more
{"transaction":{"client_ip":"34.39.235.134","time_stamp":"Wed Sep 9 09:55:04 2026","server_id":"46824fc494f03034e6b98e26d7a2d7a06b25f0b7","client_port":36796,"host_ip":"212.186.116.154","host_port":443,"unique_id":"178894050466.103369","is_interrupted":false,"request":{"method":"GET","http_version":"1.1","hostname":"privatedns.spiess-vienna.at","uri":"/","headers":{"Host":"privatedns.spiess-vienna.at","User-Agent":"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","Accept-Encoding":"gzip, deflate","Accept":"*/*","Next-Action":"x","Connection":"keep-alive","X-Nextjs-Request-Id":"791649d4"}},"response":{"http_code":400,"headers":{"Server":"nginx\u0000","Date":"Wed, 09 Sep 2026 07:55:05 GMT","Content-Type":"text/html; charset=utf-8","X-Content-Type-Options":"nosniff","Connection":"keep-alive","Content-Language":"en","Vary":"Accept-Language","Referrer-Policy":"same-origin","Cross-Origin-Opener-Policy":"same-origin"}},"producer":{"modsec
...
show less
Web App Attack
🇦🇺
aranguren.org
2026-09-09 06:45:20
(1 week ago)
34.39.235.134 - - [09/Sep/2026:16:45:16 +1000] "POST / HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.39.235.134 - - [09/Sep/2026:16:45:16 +1000] "POST / HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.235.134 - - [09/Sep/2026:16:45:17 +1000] "POST / HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.235.134 - - [09/Sep/2026:16:45:17 +1000] "POST / HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.235.134 - - [09/Sep/2026:16:45:18 +1000] "GET /.git/config HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.235.134 - - [09/Sep/2026:16:45:18 +1000] "POST / HTTP/1.1" 404 993 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.39.235.134 - - [09/Sep/2026:16:45:20 +1000] "GET /.env HTTP/1.1" 404 993 "-" "Mozi
...
show less
Bad Web Bot
🇩🇪
IVski.com
2026-09-09 05:18:18
(1 week ago)
IVski WAF | Sensitive file probe - looking for exposed .git/config
Hacking
Brute-Force
Web App Attack
🇺🇸
ALSCO®️
2026-09-08 22:00:15
(1 week ago)
Report By ALSCO Security Team: Unauthorized Connection Attempt
SQL Injection
🇺🇸
Secure Gateway®️
2026-09-08 22:00:14
(1 week ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Hacking
🇧🇪
cmbplf
2026-09-08 18:40:50
(1 week ago)
193 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇬🇧
venus.launch.bz
2026-09-08 12:39:01
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.39.235.134 (BR/Brazil/134.235.39.34. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.39.235.134 (BR/Brazil/134.235.39.34.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
Site.eu
2026-09-08 11:48:06
(1 week ago)
Excessive multi-domain requests
Brute-Force
2026-09-08 11:12:27
(1 week ago)
[ns67.kdns.gr] httpd-config-scan: sites=ipv4.portal.kapaweb.gr; logs=/var/www/vhosts/system/portal.k ...
show more
[ns67.kdns.gr] httpd-config-scan: sites=ipv4.portal.kapaweb.gr; logs=/var/www/vhosts/system/portal.kapaweb.gr/logs/proxy_access_ssl_log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
🇫🇷
Stara
2026-09-08 10:18:46
(1 week ago)
Massive 403 errors - scanning for .env, configuration files, or directory traversal
Brute-Force
Web App Attack
SSH
2026-09-08 10:01:01
(1 week ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=BR; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
2026-09-08 09:02:40
(1 week ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=portal.incognet.io; Paths=/.env,/.env.development,/.env.staging,/.env.test,/.git/config; Country=BR; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
Web App Attack
🇹🇷
sgonul71
2026-09-08 05:52:54
(1 week ago)
Web app attacks (IIS logs)
Web App Attack
🇵🇱
Budyn
2026-09-08 05:44:55
(1 week ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: portal.goblinpot.site | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
wpadm4
2026-09-08 03:58:15
(1 week ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack