🇧🇷
ICS Labs
2026-10-15 13:44:23
(2 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-15 UTC.
Brute-Force
🇩🇪
ghostwarriors
2026-10-14 19:50:09
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇺🇸
WellSpring
2026-10-14 19:43:00
(3 days ago)
env exposure on naturologie.com/dist../.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇳🇱
Alt255
2026-10-14 19:38:23
(3 days ago)
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[ti-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.84.142.236 - - [14/Oct/2026:21:38:05 +0200] "GET /static/manifest.json HTTP/2.0" 404 1358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.142.236 - - [14/Oct/2026:21:38:05 +0200] "GET /manifest.json HTTP/2.0" 404 1358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.142.236 - - [14/Oct/2026:21:38:05 +0200] "GET /aluz1bfyqveoftcgrqeh HTTP/2.0" 404 1358 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.84.142.236 - - [14/Oct/2026:21:38:05 +0200] "GET /assets/manifest.json HTTP/2.0" 404 1358 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.84.
...
show less
Bad Web Bot
Web App Attack
🇩🇪
yitzhaq
2026-10-14 19:28:29
(3 days ago)
34.84.142.236 - - [14/Oct/2026:21:28:26 +0200] "GET /static../.env HTTP/2.0" 404 43276 "-" "Mozilla/ ...
show more
34.84.142.236 - - [14/Oct/2026:21:28:26 +0200] "GET /static../.env HTTP/2.0" 404 43276 "-" "Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"
34.84.142.236 - - [14/Oct/2026:21:28:27 +0200] "GET /api/fs/read?allowOutsideWorkspace=true&path=/proc/self/environ HTTP/2.0" 403 320 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.84.142.236 - - [14/Oct/2026:21:28:27 +0200] "GET /api/console/api_server?sense_version=@@SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 403 297 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.84.142.236 - - [14/Oct/2026:21:28:27 +0200] "GET /..%2f..%2f.env HTTP/2.0" 404 294 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot"
34.84.142.236 - - [14/Oct/2026:21:28:27 +0200] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/2.0" 400 324 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML
show less
Web App Attack
Hacking
🇨🇦
SSH-Admin
2026-10-14 19:00:15
(3 days ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
🇧🇬
HighWay
2026-10-14 18:43:15
(3 days ago)
34.84.142.236 - - [14/Oct/2026:18:43:06 +0000] "GET /service-account.json HTTP/1.1" 404 66398 "-" "M ...
show more
34.84.142.236 - - [14/Oct/2026:18:43:06 +0000] "GET /service-account.json HTTP/1.1" 404 66398 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.84.142.236 - - [14/Oct/2026:18:43:07 +0000] "GET /credentials.json HTTP/1.1" 404 66464 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-14 17:38:35
(3 days ago)
(mod_security) mod_security (id:210580) triggered by 34.84.142.236 (236.142.84.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210580) triggered by 34.84.142.236 (236.142.84.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 14 13:38:29.044004 2026] [security2:error] [pid 22296:tid 22296] [client 34.84.142.236:0] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:apis. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||kirklandhighlands.org|F|2"] [data "Matched Data: proc/self/environ found within ARGS:apis: ../../../../../../proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "kirklandhighlands.org"] [uri "/api/console/api_server"] [unique_id "as--FXZvJRojQgQg1wpHfwAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
CBJ
2026-10-14 17:33:21
(3 days ago)
fail2ban: apache-random-recon
...
Web App Attack
🇩🇪
datajt
2026-10-14 17:06:19
(3 days ago)
Exploit attempt against a web application (CrowdSec scenario crowdsecurity/http-cve-2021-41773).
Hacking
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-10-14 16:35:55
(3 days ago)
2026/10/14 17:35:53 [error] 4060693#4060693: *3236346 access forbidden by rule, client: 34.84.142.23 ...
show more
2026/10/14 17:35:53 [error] 4060693#4060693: *3236346 access forbidden by rule, client: 34.84.142.236, server: operadotejo.org, request: "GET /public../.env HTTP/2.0", host: "operadotejo.org"
2026/10/14 17:35:53 [error] 4060693#4060693: *3236347 access forbidden by rule, client: 34.84.142.236, server: operadotejo.org, request: "GET /files../.env HTTP/2.0", host: "operadotejo.org"
2026/10/14 17:35:53 [error] 4060693#4060693: *3236350 access forbidden by rule, client: 34.84.142.236, server: operadotejo.org, request: "GET /static//app/.env HTTP/2.0", host: "operadotejo.org"
show less
Brute-Force
Web App Attack
🇩🇪
LRob
2026-10-14 16:01:07
(3 days ago)
Web exploit attempt | method: GET | path: /dist/manifest.json
Hacking
Web App Attack
🇨🇦
SSH-Admin
2026-10-14 15:15:03
(3 days ago)
Probing for Exploits on ns56
Exploited Host
Web App Attack
🇩🇪
updown.io
2026-10-14 12:59:34
(3 days ago)
{"level":"info","ts":1791982772.2773533,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1791982772.2773533,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.84.142.236","remote_port":"57194","client_ip":"34.84.142.236","proto":"HTTP/2.0","method":"GET","host":"status.osuny.org","uri":"/1f1wmglfhjsfrif7hsmg","headers":{"Accept":["*/*"],"X-Middleware-Subrequest":["src/middleware:nowaf:src/middleware:src/middleware:src/middleware:src/middleware:middleware:middleware:nowaf:middleware:middleware:middleware:pages/_middleware"],"Accept-Encoding":["gzip"],"X-Nextjs-Data":["1"],"User-Agent":["Mozilla/5.0 (compatible; ChatGLM-Spider/1.0; +https://zhipuai.cn/)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"status.osuny.org","ech":false}},"bytes_read":0,"user_id":"","duration":0.000131691,"size":0,"status":429,"resp_headers":{"Retry-After":["1"],"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"]}}
{"level":"info","ts":1791982772.27988,"logger":"http.log.access.log1","msg":"handled req
...
show less
DDoS Attack
Web App Attack
🇪🇸
robotstxt
2026-10-14 10:41:27
(3 days ago)
34.84.142.236 - - [14/Oct/2026:10:40:53 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
34.84.14 ...
show more
34.84.142.236 - - [14/Oct/2026:10:40:53 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
34.84.142.236 - - [14/Oct/2026:10:40:54 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
34.84.142.236 - - [14/Oct/2026:10:40:57 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
34.84.142.236 - - [14/Oct/2026:10:40:58 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
34.84.142.236 - - [14/Oct/2026:10:40:58 +0000] "-" 400 193 "-" "-" "-" edge="34.84.142.236"
...
show less
Web Spam
Web App Attack
