๐ซ๐ฎ
23p02732
2026-10-12 06:40:57
(2 days ago)
Mailserver and mailaccount attacks
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
๐ฉ๐ช
AetherFox
2026-10-11 18:37:32
(2 days ago)
AetherFox VoidGuard detected: [Sun Oct 11 18:37:29.272190 2026] [security2:error] [pid 2374640:tid 2 ...
show more
AetherFox VoidGuard detected: [Sun Oct 11 18:37:29.272190 2026] [security2:error] [pid 2374640:tid 2374681] [client 139.59.225.97:38946] [client 139.59.225.97] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/.env.dev.local"] [unique_id "asvXaUNg--A0vr08wDdOpwAAAEw"]
[Sun Oct 11 18:37:29.895113 2026] [security2:error] [pid 2374640:tid 2374688] [client 139.59.225.97:38954] [client 139.59.225.97] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/.env.development"] [unique_id "asvXaUNg--A0vr08wDdOqAAAAFM"]
[Sun Oct 11 18:37:30.569758 2026] [s
...
show less
Hacking
Bad Web Bot
๐ฌ๐ง
Smish
2026-10-11 18:35:42
(2 days ago)
HONEYPOT HIT --> Fail2ban time=1791743741 log=2026-10-11T19:35:41+01:00 ip=139.59.225.97 host=as2106 ...
show more
HONEYPOT HIT --> Fail2ban time=1791743741 log=2026-10-11T19:35:41+01:00 ip=139.59.225.97 host=as210667.net method=GET uri="//.env" status=404 ua="Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ref="-" rid=22ac043660a8b5377070d16277064f3b
show less
Web App Attack
๐บ๐ธ
antlac1
2026-10-11 17:35:29
(2 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐บ๐ธ
revslowmo
2026-10-11 16:32:43
(3 days ago)
Bot attempt ssh bruteforce
Brute-Force
SSH
๐ฉ๐ช
AetherFox
2026-10-10 19:30:47
(3 days ago)
AetherFox VoidGuard detected: [Sat Oct 10 19:30:44.651669 2026] [security2:error] [pid 2217082:tid 2 ...
show more
AetherFox VoidGuard detected: [Sat Oct 10 19:30:44.651669 2026] [security2:error] [pid 2217082:tid 2217104] [client 139.59.225.97:60096] [client 139.59.225.97] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/.env.development"] [unique_id "asqSZHu7R0ufxcZyeMEHJwAAABM"]
[Sat Oct 10 19:30:45.208121 2026] [security2:error] [pid 2217082:tid 2217103] [client 139.59.225.97:60112] [client 139.59.225.97] ModSecurity: Access denied with code 403 (phase 1). String match "/.env" at REQUEST_URI. [file "/etc/modsecurity/AetherFox.conf"] [line "99"] [id "100067"] [msg ".env access blocked by AetherFox VoidGuard"] [tag "custom-blocklist"] [hostname "draconigen.net"] [uri "/.env.example"] [unique_id "asqSZXu7R0ufxcZyeMEHKAAAABI"]
[Sat Oct 10 19:30:45.985577 2026] [sec
...
show less
Hacking
Bad Web Bot
๐ฌ๐ง
Smish
2026-10-10 19:29:00
(3 days ago)
HONEYPOT HIT --> Fail2ban time=1791660539 log=2026-10-10T20:28:59+01:00 ip=139.59.225.97 host=as2106 ...
show more
HONEYPOT HIT --> Fail2ban time=1791660539 log=2026-10-10T20:28:59+01:00 ip=139.59.225.97 host=as210667.net method=GET uri="//.env" status=404 ua="Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ref="-" rid=d2d4f726479dd3d79e222a49bd8fc0b3
show less
Web App Attack
๐ฉ๐ช
Dennis
2026-10-10 19:00:21
(3 days ago)
139.59.225.97 has been banned for triggering http-probing (16 events over 55.289314232s).
Brute-Force
Web App Attack
Anonymous
2026-10-10 18:57:31
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-10-10 18:29:52
(3 days ago)
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. E ...
show more
[backup01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 139.59.225.97 - - [10/Oct/2026:20:29:49 +0200] "GET /.env HTTP/1.1" 404 7441 "-" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
security.rdmc.fr
2026-10-10 15:58:20
(4 days ago)
Sensitive File Scan
Web App Attack
๐ฉ๐ช
23p02732
2026-10-10 15:29:49
(4 days ago)
Automated web scanning and malicious probing
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
abivia
2026-10-10 15:21:16
(4 days ago)
Abivia WAF trigger: Rule scriptKiddies: Dot file access. uri: //.env
Hacking
๐ซ๐ท
COMAITE
2026-10-10 14:38:49
(4 days ago)
Suspicious URL access.
Web App Attack
๐ฏ๐ต
VXG-NET
2026-10-10 14:31:36
(4 days ago)
port=80, indicator_type=info-leak
Hacking