๐ช๐ธ
robotstxt
2026-09-15 13:39:21
(7 hours ago)
104.22.56.83 - - [15/Sep/2026:13:38:19 +0000] "GET //.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compati ...
show more
104.22.56.83 - - [15/Sep/2026:13:38:19 +0000] "GET //.env HTTP/1.1" 403 12 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)" "35.196.198.33" edge="104.22.56.83"
104.22.56.83 - - [15/Sep/2026:13:38:19 +0000] "GET /api/.env/public/.env HTTP/1.1" 403 31824 "-" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)" "35.196.198.33" edge="104.22.56.83"
104.22.56.83 - - [15/Sep/2026:13:38:20 +0000] "GET /assets../.env HTTP/1.1" 403 31822 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)" "35.196.198.33" edge="104.22.56.83"
104.22.56.83 - - [15/Sep/2026:13:38:21 +0000] "GET /images../.env HTTP/1.1" 403 31823 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)" "35.196.198.33" edge="104.22.56.83"
104.22.56.83 - - [15/Sep/2026:13:38:21 +0000] "GET /@fs/home/ec2-user/.aws/credentials?raw?? HTTP/1.1" 403 31823 "-" "Mozill
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-09-13 20:31:35
(2 days ago)
Multiple WAF Violations
Web App Attack
๐ฏ๐ต
S.O.B.A. Dev.
2026-09-12 07:57:30
(3 days ago)
Persistent port scanning or vulnerability scanning
Port Scan
๐ง๐ช
madeit
2026-09-02 17:06:20
(1 week ago)
Web App Attack
Anonymous
2026-08-29 09:38:11
(2 weeks ago)
104.22.56.83 - - [29/Aug/2026:02:38:10 -0700] "GET / HTTP/1.1" 302 7259 "-" "Mozilla/5.0 (Linux; And ...
show more
104.22.56.83 - - [29/Aug/2026:02:38:10 -0700] "GET / HTTP/1.1" 302 7259 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.7922.173 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Brute-Force
SSH
๐ฉ๐ช
webko.si
2026-08-15 04:17:56
(1 month ago)
BARUTANA.si: Bruteforce web app access, URI detail: '/.docker/config.json'.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-11 18:41:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Aug 11 14:41:35.931523 2026] [security2:error] [pid 20079:tid 20079] [client 104.22.56.83:12446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "igpcloud.biz"] [uri "/.env.local"] [unique_id "ants3-1Oh3YJLjOeTzK7sAAAAAM"], referer: https://www.google.com/search?q=igpcloud.biz
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-07-29 16:13:15
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jul 29 12:13:08.186284 2026] [security2:error] [pid 2792166:tid 2792166] [client 104.22.56.83:9634] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "glaswood.com"] [uri "/.git/HEAD"] [unique_id "amomlCL6mz4A1BkUvcr9NwAAABw"], referer: https://www.google.com/search?q=glaswood.com
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-07-29 00:13:58
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-07-26 14:02:42
(1 month ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-07-10 00:12:07
(2 months ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-06-27 00:09:49
(2 months ago)
Web attack
Bad Web Bot
Web App Attack
Anonymous
2026-06-25 22:02:38
(2 months ago)
Web attack
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-20 00:35:38
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 20:35:30.998240 2026] [security2:error] [pid 18001:tid 18001] [client 104.22.56.83:14323] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "toastergraphics.com"] [uri "/.git/config"] [unique_id "ajXgUiF7lmdEtPm2Bpu14AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-19 08:17:13
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports ...
show more
(mod_security) mod_security (id:210492) triggered by 104.22.56.83 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 19 04:17:02.510608 2026] [security2:error] [pid 16341:tid 16341] [client 104.22.56.83:10833] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bonvivantorganics.com"] [uri "/.env.production"] [unique_id "ajT6_r1HmJozlf2Gz4iVUQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack