🇲🇽
octageeks.com
2026-11-07 05:12:18
UTC ·
(1 day ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇳🇱
homeshowdomain.nl
2026-11-06 23:00:55
UTC ·
(1 day ago)
Auto-ban: >3000 req/min op 2026-11-06
Web App Attack
SSH
Hacking
🇩🇪
gurnip
2026-11-06 22:26:26
UTC ·
(1 day ago)
Vulnerability probe of page /.env, not found on the server.
Brute-Force
Web App Attack
🇳🇱
BlueWire Hosting
2026-11-06 21:56:26
UTC ·
(1 day ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇦
jacqueskruger
2026-11-06 20:39:56
UTC ·
(1 day ago)
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 1 triggering events. Detections: crowdsecurity/vpatch-env-access. Latest evidence UTC: 2026-11-06T20:32:04Z. Evidence: inline WAF rejection of ex ...
show more
Locally observed malicious HTTP activity on our reverse proxy in the last 24 hours. 1 confirmed alerts / 1 triggering events. Detections: crowdsecurity/vpatch-env-access. Latest evidence UTC: 2026-11-06T20:32:04Z. Evidence: inline WAF rejection of exploit requests.
show less
Web App Attack
🇫🇷
zulzeen
2026-11-06 19:58:48
UTC ·
(1 day ago)
[incypit-web] Banned by Fail2ban (Jail: syswarden-secretshunter)
Hacking
Web App Attack
Bad Web Bot
Port Scan
🇺🇸
TPI-Abuse
2026-11-06 19:47:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:47:35.219488 2026] [security2:error] [pid 25196:tid 25196] [client 151.240.64.128:50673] ...
show more
(mod_security) mod_security (id:210492) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:47:35.219488 2026] [security2:error] [pid 25196:tid 25196] [client 151.240.64.128:50673] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "berlatinc.com"] [uri "/.env"] [unique_id "au4u17-KMGpt2yJCQgVe8gAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
MyGlobalFlowers
2026-11-06 19:12:10
UTC ·
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 19:08:30
UTC ·
(1 day ago)
(mod_security) mod_security (id:949110) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:08:24.425138 2026] [security2:error] [pid 7044:tid 7044] [client 151.240.64.128:29145] M ...
show more
(mod_security) mod_security (id:949110) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 14:08:24.425138 2026] [security2:error] [pid 7044:tid 7044] [client 151.240.64.128:29145] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "euro-theatre.com"] [uri "/.env"] [unique_id "au4lqDK7LbWtYrovMMS6YgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
chronos
2026-11-06 18:50:07
UTC ·
(1 day ago)
[AUTORAVALT][[06/11/2026 - 15:50:07 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[151.240.64.128] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web a ...
show more
[AUTORAVALT][[06/11/2026 - 15:50:07 -03:00 UTC]
Attack from [RIPE Network Coordination Centre]
[151.240.64.128] Action: BLocKed
Hacking... Unauthorized attempts to access the server.
Web App Attack -> Attempts to probe for or exploit installed web applications such as a CMS like WordPress/Drupal, e-commerce solutions, forum software, phpMyAdmin and various oth]
...
show less
Hacking
Web App Attack
2026-11-06 18:32:30
UTC ·
(1 day ago)
151.240.64.128 - - [07/Nov/2026:02:32:29 +0800] "GET /.env HTTP/1.1" 404 300905 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:77.0) Gecko/20100101 Firefox/77.0"
...
Bad Web Bot
Web App Attack
2026-11-06 18:29:41
UTC ·
(1 day ago)
Malicious activity detected by fail2ban (jail=honeypot)
Hacking
Web App Attack
🇺🇦
Scientific Route
2026-11-06 18:11:27
UTC ·
(1 day ago)
[06/Nov/2026:20:11:27 +0200] -- 151.240.64.128 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.env HTTP/1.1
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 18:03:18
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:03:10.838803 2026] [security2:error] [pid 6884:tid 6884] [client 151.240.64.128:21831] M ...
show more
(mod_security) mod_security (id:210492) triggered by 151.240.64.128 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:03:10.838803 2026] [security2:error] [pid 6884:tid 6884] [client 151.240.64.128:21831] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "t9teamsportinggoods.com"] [uri "/.env"] [unique_id "au4WXuFiHJJOWGL0SJ0kKQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
Nodez3r0
2026-11-06 17:56:32
UTC ·
(1 day ago)
WOPR honeypot nedry.wopr.systems: 1 admin_probe (e.g. /.env); first seen 2026-11-06T17:56:32Z, last seen 2026-11-06T17:56:32Z
Web App Attack
Hacking
