🇫🇷
SpaceHost-Server
2026-10-22 22:24:01
(4 days ago)
Brute-Force
Web App Attack
🇬🇧
openstrike.co.uk
2026-10-22 05:15:12
(4 days ago)
223 attacks on PHP URLs, env grabbing URLs, password/key grabbing URLs, env grabbing URLs (type 2), ...
show more
223 attacks on PHP URLs, env grabbing URLs, password/key grabbing URLs, env grabbing URLs (type 2), directory traversals, VC URLs, config grabbing URLs (type 2):
POST /icecoder/lib/file-control.php HTTP/1.1
GET /ml/.env HTTP/1.1
GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/1.1
GET /public/plugins/grafana-clock-panel/../../../../../../../../proc/self/environ HTTP/1.1
GET /..%2f..%2f.env HTTP/1.1
GET /.git/config HTTP/1.1
GET /config/settings.local.yml HTTP/1.1
show less
Web App Attack
Hacking
🇩🇪
MBombeck
2026-10-22 00:31:21
(5 days ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-21 22:23:42
(5 days ago)
Brute-Force
Web App Attack
🇧🇷
ICS Labs
2026-10-21 14:40:22
(5 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force, Exploited Host. Last observed 2026-10-21 UTC.
Brute-Force
Exploited Host
🇳🇱
ConsulHosting
2026-10-21 11:29:57
(5 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇳🇱
e.fierstra
2026-10-21 11:18:32
(5 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-10-21 10:25:40
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
FeG Deutschland
2026-10-21 10:11:31
(5 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 10:04:50
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.67.157.243 (243.157.67.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.67.157.243 (243.157.67.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 06:04:46.477353 2026] [security2:error] [pid 5635:tid 5635] [client 34.67.157.243:40428] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||banis-associates.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "banis-associates.com"] [uri "/z9x8c7v6b5-debug-trigger-banis-associates.com"] [unique_id "atiOPiDwEjmknYkI2ZqaywAAADc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-21 08:38:02
(5 days ago)
258 requests with url.path *credentials.json
115 requests with url.path *compose.yml
103 requests ...
show more
258 requests with url.path *credentials.json
115 requests with url.path *compose.yml
103 requests with url.path *compose.yaml
show less
Brute-Force
Bad Web Bot
🇺🇸
mnsf
2026-10-21 08:05:35
(5 days ago)
Too many Status 40X (30)
Scanning/Probing (24)
Brute-Force
Web App Attack
🇯🇵
beon
2026-10-21 07:01:00
(5 days ago)
[DateTime=>2026-10-21T07:01:00Z to 2026-10-21T07:01:09Z (UTC)] , [HoneyPot_Hits=>228 times] , [Honey ...
show more
[DateTime=>2026-10-21T07:01:00Z to 2026-10-21T07:01:09Z (UTC)] , [HoneyPot_Hits=>228 times] , [HoneyPots=>/@fs/app/.env, /.env.prod.local, /.envrc, /.dbeaver/credentials-config.json, /.env.development.local, /.env.testing and others] , [irregular_query_Hits=>57 times] , [404targets=>/lib/terminal-xhr.php, /zuzw8k916lljqf7vpago, /assets/manifest.json, /asset-manifest.json, /z9x8c7v6b5-debug-trigger-www., /webpack-stats.json and others] , [total_Hits=>417 times] , [hit_per_second=>46.33] , [Keyword=>WordPress, file manager scripts, PHP web shells, irregular query]
show less
Bad Web Bot
Web App Attack
Hacking
🇩🇪
macrob
2026-10-21 06:35:05
(5 days ago)
2026/10/21 06:35:03 [error] 2817545#2817545: *21222647 access forbidden by rule, client: 34.67.157.2 ...
show more
2026/10/21 06:35:03 [error] 2817545#2817545: *21222647 access forbidden by rule, client: 34.67.157.243, server: finami.com.ua, request: "GET /@fs/.env?url&raw?? HTTP/1.1", host: "www.finami.com.ua"
2026/10/21 06:35:03 [error] 2817547#2817547: *21222648 access forbidden by rule, client: 34.67.157.243, server: finami.com.ua, request: "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1", host: "www.finami.com.ua"
2026/10/21 06:35:03 [error] 2817545#2817545: *21222650 access forbidden by rule, client: 34.67.157.243, server: finami.com.ua, request: "GET /@fs/.env?import&?raw?? HTTP/1.1", host: "www.finami.com.ua"
...
show less
Web App Attack
2026-10-21 05:40:25
(5 days ago)
Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized pro ...
show more
Attempted access to sensitive endpoint (/.env.supabase) detected. Automated scan or unauthorized probing.
show less
Web App Attack