๐ฉ๐ช
IVski.com
2026-10-21 03:42:38
(2 days ago)
IVski WAF | Sensitive file probe - looking for exposed .env.js
Hacking
Brute-Force
Web App Attack
Anonymous
2026-10-19 14:08:43
(3 days ago)
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Back ...
show more
Blocked by FortiWeb WAF ML threat detection. ML probability: 99%, Country: TW, Attack patterns: Backup file probing, Cloud secrets probing, Directory traversal
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
IVski.com
2026-10-19 11:22:11
(3 days ago)
IVski WAF | Sensitive file probe detected - looking for config, backups or credentials
Hacking
Brute-Force
Web App Attack
๐ง๐ฌ
Stoyko Stoykov
2026-10-19 08:42:17
(3 days ago)
35.221.195.188 - - [19/Oct/2026:11:42:17 +0300] "GET /core/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (co ...
show more
35.221.195.188 - - [19/Oct/2026:11:42:17 +0300] "GET /core/.env HTTP/2.0" 404 0 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Hacking
Web App Attack
๐บ๐ธ
oralunal
2026-10-19 06:17:40
(4 days ago)
IP banned by Fail2Ban in jail its-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-19 05:37:08
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 35.221.195.188 (188.195.221.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.221.195.188 (188.195.221.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:37:00.951071 2026] [security2:error] [pid 7305:tid 7305] [client 35.221.195.188:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.link"] [uri "/.htpasswd"] [unique_id "atWsfPFsHwVLcnXIhVLJPgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-10-19 02:03:48
(4 days ago)
[ISILIA Protection v2.3] Tentative d'accรจs: /api/uploads/%2e%2e%2f%2e%2e%2f.env [RATE LIMITED - 7200 ...
show more
[ISILIA Protection v2.3] Tentative d'accรจs: /api/uploads/%2e%2e%2f%2e%2e%2f.env [RATE LIMITED - 7200s quarantine] | Pays: TW | UA: Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/web
show less
Hacking
Web App Attack
๐ช๐ธ
robotstxt
2026-10-19 00:53:28
(4 days ago)
35.221.195.188 - - [19/Oct/2026:00:53:09 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 8350 "h ...
show more
35.221.195.188 - - [19/Oct/2026:00:53:09 +0000] "GET /dist/.vite/manifest.json HTTP/2.0" 403 8350 "https://serenitas.es/dist/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="35.221.195.188"
35.221.195.188 - - [19/Oct/2026:00:53:14 +0000] "GET /api/data/..%2f..%2f.env HTTP/2.0" 403 8788 "https://serenitas.es/api/data/..%2f..%2f.env" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="35.221.195.188"
35.221.195.188 - - [19/Oct/2026:00:53:14 +0000] "GET /api/orders/..%2f..%2f.env HTTP/2.0" 403 8788 "https://serenitas.es/api/orders/..%2f..%2f.env" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" "-" edge="35.221.195.188"
35.221.195.188 - - [19/Oct/2026:00:53:16 +0000] "GET /.env.supabase HTTP/2.0" 403 8788 "https://serenitas.es/.env.supabase" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-10-18 22:15:26
(4 days ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
FD-IX
2026-10-18 21:59:15
(4 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-18 21:57:30
(4 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-196)
Bad Web Bot
๐ง๐ท
ICS Labs
2026-10-18 21:34:24
(4 days ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-10-18 19:50:08
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
yitzhaq
2026-10-18 19:42:08
(4 days ago)
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /admin%2F.env HTTP/2.0" 404 320 "-" "Mozilla/5. ...
show more
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /admin%2F.env HTTP/2.0" 404 320 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /..%2f.env HTTP/2.0" 404 297 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /%2e%2e/.env HTTP/2.0" 400 327 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /api/console/api_server?sense_version=@@SENSE_VERSION&apis=../../../../../../.env HTTP/2.0" 307 511 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
35.221.195.188 - - [18/Oct/2026:21:42:05 +0200] "GET /api/console/api_server?sense_version=@@SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/2.0" 307 532 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
35.221.195.188 - - [18/Oct/2026:21:42:0
show less
Web App Attack
Hacking
๐ฉ๐ช
dbmwebdesign
2026-10-18 17:40:20
(4 days ago)
WAF repeated trigger detected by Fail2Ban in plesk-modsecurity jail
Web App Attack