🇧🇪
boxed-it
2026-10-14 16:04:06
(1 day ago)
GET /.git/config (Tarpitted for 1d15h8m28s, wasted 8.06MB)
Web App Attack
🇫🇷
SpaceHost-Server
2026-10-13 22:16:49
(1 day ago)
Brute-Force
Web App Attack
🇳🇱
oisecnet
2026-10-13 21:03:02
(1 day ago)
Automated report: Unauthorized vulnerability scanning detected on 2026-10-13. 87 requests from this ...
show more
Automated report: Unauthorized vulnerability scanning detected on 2026-10-13. 87 requests from this IP.
show less
Port Scan
Hacking
Web App Attack
🇺🇸
craudiovizai
2026-10-13 18:30:31
(1 day ago)
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.env, /vendor/phpuni ...
show more
Automated honeypot detection. blocked ip against a Next.js application. Paths: /.env, /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php, /apps/weddings/blog. Blocked at the edge.
show less
Bad Web Bot
🇧🇷
radardatelecom
2026-10-13 14:15:03
(2 days ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
2026-10-13 13:45:28
(2 days ago)
Observed scanned 1 known-sensitive endpoint(s), e.g.: /.git/config
Bad Web Bot
Web App Attack
🇯🇵
weils.net
2026-10-13 13:30:59
(2 days ago)
2026-10-13 21:30:58(GMT+8) - /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-13 13:23:12
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 170.64.154.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.154.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 09:23:07.259649 2026] [security2:error] [pid 7971:tid 7971] [client 170.64.154.153:62168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weightlossover50.customdesignsbybjp.com"] [uri "/.env"] [unique_id "as4wu8fEy8DBFPP13zZ3jAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Vegascosmetics
2026-10-13 13:14:32
(2 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possi ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after PHP/CMS/webshell exploit probe (possible exploited host). Evidence: AttackPattern: eval-stdin\.php (Match: eval-stdin.php)
show less
Hacking
Exploited Host
Web App Attack
2026-10-13 12:49:52
(2 days ago)
170.64.154.153 - - [13/Oct/2026:14:49:51 +0200] "GET /.env HTTP/1.1" 404 6840 "-" "Mozilla/5.0 (Wind ...
show more
170.64.154.153 - - [13/Oct/2026:14:49:51 +0200] "GET /.env HTTP/1.1" 404 6840 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-10-13 12:32:48
(2 days ago)
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/.env"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/wp"
13 ...
show more
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/.env"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/wp"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/wordpress"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/blog"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/demo"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/new"
13/Oct/2026:12:32:48 +0000;170.64.154.153;"/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"
...
show less
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-13 12:26:48
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 170.64.154.153 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 170.64.154.153 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 08:26:44.076648 2026] [security2:error] [pid 27749:tid 27749] [client 170.64.154.153:26940] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "weddingmusicguitar.com"] [uri "/.env"] [unique_id "as4jhG5wSTHX6_ixH3mC2gAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
Lawtro
2026-10-13 12:20:32
(2 days ago)
{"level":"error","ts":1791894031.8519042,"logger":"http.log.access.log1","msg":"handled request","re ...
show more
{"level":"error","ts":1791894031.8519042,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.154.153","remote_port":"2096","proto":"HTTP/2.0","method":"GET","host":"weddingcakeswhitsunday.com.au","uri":"/.env","headers":{"Accept":["*/*"],"User-Agent":["Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"],"Accept-Encoding":["gzip, br, deflate"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"h2","server_name":"weddingcakeswhitsunday.com.au"}},"user_id":"","duration":0.000050997,"size":15,"status":403,"resp_headers":{"Alt-Svc":["h3=\":443\"; ma=2592000"],"Content-Type":["text/plain; charset=utf-8"]}}
{"level":"error","ts":1791894031.8637543,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"170.64.154.153","remote_port":"2096","proto":"HTTP/2.0","method":"GET","host":"weddingcakeswhitsunday.com.au","uri":"/.git/config","headers":{"Accept":["*/*"]
...
show less
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-10-13 12:20:17
(2 days ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
2026-10-13 12:13:06
(2 days ago)
Detected by CrowdSec: crowdsecurity/CVE-2017-9841
Web App Attack
