🇺🇸
Secure Gateway®️
2026-11-05 22:00:26
UTC ·
(21 hours ago)
Report By Secure Gateway Security Team: Suspicious File Upload Attempt
Hacking
🇺🇸
ALSCO®️
2026-11-05 22:00:26
UTC ·
(21 hours ago)
Report By ALSCO Security Team: SQL Injection Attempt Detected
Web App Attack
🇺🇸
TtlPst
2026-11-05 13:53:50
UTC ·
(1 day ago)
App probing / vulnerability scanning in path GET /static/manifest.json
Web App Attack
Bad Web Bot
2026-11-05 12:45:00
UTC ·
(1 day ago)
Excessive crawling/scraping. Vulnerable file probing.
Brute-Force
Bad Web Bot
Web App Attack
2026-11-05 12:42:06
UTC ·
(1 day ago)
[server.techsupportltd.gr] httpd-config-scan: sites=www.jewelinas.gr; logs=/var/log/httpd/domains/jewelyn.gr.log; samples=/.pypirc | /cache/original/%2e%2e/%2e%2e/.env | /cache/original/%2e%2e/.env
Hacking
Web App Attack
🇦🇺
rubixstudios
2026-11-05 09:52:02
UTC ·
(1 day ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇵🇱
ketovoila.pl
2026-11-05 09:23:32
UTC ·
(1 day ago)
ketovoila.pl web app secret/repository scan: hits=685; unique_paths=272; sample_paths=/.//.env,/.aws/credentials,/.aws/credentials%3F.txt; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/53 ...
show more
ketovoila.pl web app secret/repository scan: hits=685; unique_paths=272; sample_paths=/.//.env,/.aws/credentials,/.aws/credentials%3F.txt; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"; window=2026-11-05T09:23:32Z..2026-11-05T09:24:52Z HTTP methods: GET (676),POST (9).
show less
Bad Web Bot
Web App Attack
🇵🇱
ketovoila.pl
2026-11-05 09:23:32
UTC ·
(1 day ago)
ketovoila.pl web app secret/repository scan: hits=1060; unique_paths=324; sample_paths=/.//.env,/.aws/credentials,/.aws/credentials%3F.txt; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/5 ...
show more
ketovoila.pl web app secret/repository scan: hits=1060; unique_paths=324; sample_paths=/.//.env,/.aws/credentials,/.aws/credentials%3F.txt; UA="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"; window=2026-11-05T09:23:32Z..2026-11-05T11:33:35Z HTTP methods: GET (1049),POST (11).
show less
Bad Web Bot
Web App Attack
🇺🇸
iwle
2026-11-05 08:38:01
UTC ·
(1 day ago)
[Thu Nov 05 03:37:59.624586 2026] [:error] [pid 909222:tid 909300] [client 35.234.40.26:50564] [client 35.234.40.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\ ...
show more
[Thu Nov 05 03:37:59.624586 2026] [:error] [pid 909222:tid 909300] [client 35.234.40.26:50564] [client 35.234.40.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "mail.justuptowngames.com"] [uri "/.env.supabase"] [unique_id "auxAZy0cNuZBPaP5Eq3D4QAAAYE"]
[Thu Nov 05 03:38:00.164970 2026] [:error] [pid 909140:tid 909205] [client 35.234.40.26:50684] [client 35.234.40.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?
...
show less
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-05 08:32:30
UTC ·
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇩🇪
JLKnoch Software GmbH
2026-11-05 08:15:52
UTC ·
(1 day ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
🇹🇷
Jova
2026-11-05 07:24:34
UTC ·
(1 day ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇳🇱
ConsulHosting
2026-11-05 06:16:27
UTC ·
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
TAY
2026-11-05 05:41:45
UTC ·
(1 day ago)
35.234.40.26 - - [05/Nov/2026:13:41:44 +0800] "GET /appearance/../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.234.40.26 - - [05/Nov/2026:1 ...
show more
35.234.40.26 - - [05/Nov/2026:13:41:44 +0800] "GET /appearance/../../.env HTTP/1.1" 400 2057 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)"
35.234.40.26 - - [05/Nov/2026:13:41:44 +0800] "GET /appearance/../../proc/self/environ HTTP/1.1" 400 2057 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
35.234.40.26 - - [05/Nov/2026:13:41:44 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
35.234.40.26 - - [05/Nov/2026:13:41:44 +0800] "GET /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../proc/self/environ HTTP/1.1" 404 2050 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
3
...
show less
Brute-Force
🇫🇷
conseilgouz
2026-11-05 05:24:16
UTC ·
(1 day ago)
joe-Direct access to plugin not allowed.
Hacking
