๐ฎ๐ฉ
Burayot
2026-10-13 20:12:59
(20 hours ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 143.244.45.229 (UA/Ukraine/unn-143-2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 143.244.45.229 (UA/Ukraine/unn-143-244-45-229.datapacket.com): 2 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
helios.live
2026-10-13 20:01:49
(20 hours ago)
2026/10/13 20:01:48 [error] 768797#768797: *880295 access forbidden by rule, client: 143.244.45.229, ...
show more
2026/10/13 20:01:48 [error] 768797#768797: *880295 access forbidden by rule, client: 143.244.45.229, server: kocervpn.com, request: "GET /.env.save HTTP/1.1", host: "kocervpn.com"
2026/10/13 20:01:48 [error] 768797#768797: *880295 access forbidden by rule, client: 143.244.45.229, server: kocervpn.com, request: "GET /.env.bak HTTP/1.1", host: "kocervpn.com"
2026/10/13 20:01:48 [error] 768797#768797: *880295 access forbidden by rule, client: 143.244.45.229, server: kocervpn.com, request: "GET /.env.local HTTP/1.1", host: "kocervpn.com"
2026/10/13 20:01:48 [error] 768797#768797: *880295 access forbidden by rule, client: 143.244.45.229, server: kocervpn.com, request: "GET /.env.old HTTP/1.1", host: "kocervpn.com"
2026/10/13 20:01:49 [error] 768797#768797: *880305 access forbidden by rule, client: 143.244.45.229, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-13 19:42:06
(20 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ง๐ช
cmbplf
2026-10-13 17:53:05
(22 hours ago)
14 requests with url.original /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config ...
show more
14 requests with url.original /wp-admin/admin-ajax.php?action=duplicator_download&file=../wp-config.php
show less
Brute-Force
Bad Web Bot
๐ฌ๐ง
consul.to
2026-10-13 17:17:32
(23 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
Sรฉfora Srl
2026-10-13 17:15:24
(23 hours ago)
crowdsecurity/http-probing detected by CrowdSec
Web App Attack
๐ญ๐บ
IloGus
2026-10-13 16:04:32
(1 day ago)
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/env via rule: /c ...
show more
[Laravel HoneypotPlus] Automated report - Honeypot access detected on path: /config/env via rule: /config
show less
Web App Attack
Brute-Force
Port Scan
๐บ๐ธ
TPI-Abuse
2026-10-13 15:23:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 143.244.45.229 (unn-143-244-45-229.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 143.244.45.229 (unn-143-244-45-229.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:23:07.040453 2026] [security2:error] [pid 17721:tid 17721] [client 143.244.45.229:54227] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "humans2humans.org"] [uri "/.env"] [unique_id "as5M2zFtPEjrEhbmJQ2qFgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
H24
2026-10-13 14:56:39
(1 day ago)
/index.php /.env /crm/.env
Web App Attack
Anonymous
2026-10-13 14:54:32
(1 day ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ณ๐ด
jad-abuse
2026-10-13 14:03:53
(1 day ago)
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe ...
show more
ActiveDefense automated detection: malicious HTTP scanning / exploit attempts. Signatures: env_probe, source_backup, admin_tools, ssh_keys, credential_file, db_dump, aws_creds, cgi_probe. Observed by 1 sensor(s); 423 hits.
show less
Hacking
Brute-Force
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-13 13:59:35
(1 day ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 143.244.45.229 - - [13/Oct/2026:15:59:19 +0200] "GET /.env HTTP/1.1" 301 1373 "-" "-"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Baking333
2026-10-13 13:57:09
(1 day ago)
[redacted] 143.244.45.229 - - [13/Oct/2026:14:57:07 +0100] "GET /.[redacted] HTTP/1.1" 301 536 0/135 ...
show more
[redacted] 143.244.45.229 - - [13/Oct/2026:14:57:07 +0100] "GET /.[redacted] HTTP/1.1" 301 536 0/135 "-" "-" [redacted] 143.244.45.229 - - [13/Oct/2026:14:57:07 +0100] "GET /.[redacted] HTTP/1.1" 301 542 0/135 "-" "-"
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-12 17:15:09
(1 day ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 16:46:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 143.244.45.229 (unn-143-244-45-229.datapacket.c ...
show more
(mod_security) mod_security (id:210492) triggered by 143.244.45.229 (unn-143-244-45-229.datapacket.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 12:46:37.164100 2026] [security2:error] [pid 6053:tid 6053] [client 143.244.45.229:51917] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agrizel.com"] [uri "/.env.bak"] [unique_id "as0O7RX0p4ANh7hEpVMy1AAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack