๐จ๐ญ
TheCoon
2026-10-24 16:30:59
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐จ๐ญ
TheCoon
2026-10-23 06:36:01
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐จ๐ญ
TheCoon
2026-10-21 06:57:59
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
๐ซ๐ท
masterguru
2026-10-15 11:26:41
(2 weeks ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ช๐ธ
robotstxt
2026-10-15 10:26:12
(2 weeks ago)
34.73.62.200 - - [15/Oct/2026:10:25:57 +0000] "GET /.env HTTP/1.1" 403 57049 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.73.62.200"
34.73.62.200 - - [15/Oct/2026:10:25:57 +0000] "GET /.env.local HTTP/1.1" ...
show more
34.73.62.200 - - [15/Oct/2026:10:25:57 +0000] "GET /.env HTTP/1.1" 403 57049 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.73.62.200"
34.73.62.200 - - [15/Oct/2026:10:25:57 +0000] "GET /.env.local HTTP/1.1" 403 57054 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:133.0) Gecko/20100101 Firefox/133.0" "-" edge="34.73.62.200"
34.73.62.200 - - [15/Oct/2026:10:25:58 +0000] "GET /.env.local HTTP/1.1" 403 57054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0" "-" edge="34.73.62.200"
34.73.62.200 - - [15/Oct/2026:10:25:58 +0000] "GET /.env.production HTTP/1.1" 403 57054 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.73.62.200"
34.73.62.200 - - [15/Oct/2026:10:25:58 +0000] "GET /.env.production HTTP/1.1" 403 57054 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 14_7_2) AppleWebKit/605.1.15 (KHTML,
...
show less
Web App Attack
๐ต๐ฑ
MatStef132
2026-10-15 09:35:50
(2 weeks ago)
MatShield L7: blocked on play.dzielnicarp.eu (secret-path-probe)
DDoS Attack
๐ต๐ฑ
Budyn
2026-10-15 07:37:05
(2 weeks ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.definitelynotahoneypot.xyz | URI: /.env | U ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: cache.definitelynotahoneypot.xyz | URI: /.env | UA: Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-15 05:40:03
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Site.eu
2026-10-14 23:30:19
(2 weeks ago)
Excessive 404/403 errors
Brute-Force
๐ธ๐ช
vaia.cloud
2026-10-14 18:30:02
(2 weeks ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
Anonymous
2026-10-14 12:26:11
(2 weeks ago)
(mod_security) mod_security triggered on hostname [redacted] 34.73.62.200 (US/United States/200.62.73.34.bc.googleusercontent.com)
SQL Injection
๐ณ๐ฑ
Alt255
2026-10-14 10:11:32
(2 weeks ago)
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.73.62.200 - - [14/Oct/2026:12:11:27 +0200] "GET /.env HTTP/1.1" 301 6332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KH ...
show more
[ti-17al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.73.62.200 - - [14/Oct/2026:12:11:27 +0200] "GET /.env HTTP/1.1" 301 6332 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36 Edg/130.0.0.0"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-10-14 04:16:20
(2 weeks ago)
[WedOct1406:16:16.2372562026][security2:error][pid1971424:tid1971528][client34.73.62.200:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BL ...
show more
[WedOct1406:16:16.2372562026][security2:error][pid1971424:tid1971528][client34.73.62.200:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"chryptofarm.ch\"][uri\"/.gitlab-ci.yml\"][unique_id\"as8CEI5mJQ7x8IQQhaBNVwAAAU4\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-14 03:20:46
(2 weeks ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-13 20:09:06
(2 weeks ago)
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.23.245.88
34.73.62.200 - - [13/Oct/2026:15:09:04 -050 ...
show more
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.23.245.88
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.23.245.88
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 104.23.245.88
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 18_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.1 Mobile/15E148 Safari/604.1" 104.23.245.88
34.73.62.200 - - [13/Oct/2026:15:09:04 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Windows NT 10.0; W
...
show less
Brute-Force
Bad Web Bot
Web App Attack