|
🇧🇷
ICS Labs
|
|
ICS Labs threat intelligence (ICS Feeds): Exploited Host. Last observed 2026-11-04 UTC.
|
Exploited Host
|
|
🇩🇪
FeG Deutschland
|
|
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1
|
Exploited Host
Web App Attack
|
|
Anonymous
|
|
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "POST ...
show more
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "POST / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [03/Nov/2026:23:19:29 +0200] "GET /.git/config HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [03/Nov/2026:23:19:30 +0200] "GET /.env HTTP/1.1" 403 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
mnsf
|
|
Scanning/Probing (20)
|
Brute-Force
Web App Attack
|
|
🇳🇱
Alt255
|
|
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.231.126.31 - - [02/Nov/2026:20:43:43 +0100] "GET /.git/config HTTP/2.0" 404 51560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWe ...
show more
[cb-15al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 35.231.126.31 - - [02/Nov/2026:20:43:43 +0100] "GET /.git/config HTTP/2.0" 404 51560 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
|
Bad Web Bot
Web App Attack
|
|
🇳🇱
Site.eu
|
|
Scanning for secret files (.env, .git, credentials, config backups)
|
Bad Web Bot
Web App Attack
|
|
🇮🇹
VHosting
|
|
Detected WordPress attack from different servers
|
Brute-Force
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /core/app/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [02/Nov/2026:12:56:12 + ...
show more
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /core/app/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /core/Database/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /config/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /private/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
35.231.126.31 - - [02/Nov/2026:12:56:12 +0100] "GET /current/.env HTTP/1.1" 404 509 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML
show less
|
Web App Attack
Hacking
|