๐ฉ๐ช
kivitendo.de
2026-06-19 00:42:33
(43 minutes ago)
[Fri Jun 19 02:42:46.072680 2026] [access_compat:error] [pid 1739952:tid 1739979] [client 206.72.199 ...
show more
[Fri Jun 19 02:42:46.072680 2026] [access_compat:error] [pid 1739952:tid 1739979] [client 206.72.199.210:39488] AH01797: client denied by server configuration: /var/www/kivitendo-erp/.git/config
[Fri Jun 19 02:42:46.235150 2026] [access_compat:error] [pid 1739952:tid 1739986] [client 206.72.199.210:39488] AH01797: client denied by server configuration: /var/www/kivitendo-erp/.git/config, referer: http://www.surplus-erp.de/.git/config
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
kivitendo.de
2026-06-18 22:54:42
(2 hours ago)
[Fri Jun 19 00:54:55.576804 2026] [access_compat:error] [pid 509907:tid 509915] [client 206.72.199.2 ...
show more
[Fri Jun 19 00:54:55.576804 2026] [access_compat:error] [pid 509907:tid 509915] [client 206.72.199.210:49312] AH01797: client denied by server configuration: /var/www/kivitendo/.git/config
[Fri Jun 19 00:54:55.704203 2026] [access_compat:error] [pid 509907:tid 509919] [client 206.72.199.210:49312] AH01797: client denied by server configuration: /var/www/kivitendo/.git/config, referer: http://www.studio-b-kivitendo.de/.git/config
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-06-18 20:52:40
(4 hours ago)
Try to access /.git/config
Web App Attack
๐ซ๐ท
sthoyer.de
2026-06-18 20:37:57
(4 hours ago)
206.72.199.210 - - [18/Jun/2026:22:37:56 +0200] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 ...
show more
206.72.199.210 - - [18/Jun/2026:22:37:56 +0200] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
206.72.199.210 - - [18/Jun/2026:22:37:56 +0200] "GET /.git/config HTTP/1.1" 302 495 "http://www.sthoyer.de/.git/config" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
206.72.199.210 - - [18/Jun/2026:22:37:56 +0200] "GET /.git/config HTTP/1.1" 302 495 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
Bedios GmbH
2026-06-18 20:14:37
(5 hours ago)
Wordpress hacking attempt
Web App Attack
๐ฉ๐ช
on-com
2026-06-18 19:58:54
(5 hours ago)
URL scan
Brute-Force
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-06-18 19:44:44
(5 hours ago)
(Kingcopy.org-AI-IDS-Report):IP automatically blocked after suspicious activity. Vegas Security
DDoS Attack
Hacking
Exploited Host
๐ฉ๐ช
pltcldvlpr
2026-06-18 19:20:16
(6 hours ago)
CMS/framework probe: 206.72.199.210 - - [18/Jun/2026:21:20:15 +0200] "GET /.git/config HTTP/1.1" 301 ...
show more
CMS/framework probe: 206.72.199.210 - - [18/Jun/2026:21:20:15 +0200] "GET /.git/config HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36" asn=19318 org="Interserver, Inc" country=US
...
show less
Web App Attack
๐ฉ๐ช
gadix
2026-06-18 17:39:58
(7 hours ago)
[18/Jun/2026:18:49:35.763447 +0200] ajQhn8FanhrqUmIXH_XF9gAAAAg 206.72.199.210 50294 127.0.0.1 7081
...
show more
[18/Jun/2026:18:49:35.763447 +0200] ajQhn8FanhrqUmIXH_XF9gAAAAg 206.72.199.210 50294 127.0.0.1 7081
[18/Jun/2026:18:49:35.800796 +0200] ajQhnx2piFS-us_wO71QjgAAAAM 206.72.199.210 50308 127.0.0.1 7081
[18/Jun/2026:19:39:58.024667 +0200] ajQtbUDFQAEN0qg6T1NjLAAAAAI 206.72.199.210 34952 127.0.0.1 7081
...
show less
Web App Attack
๐ฌ๐ง
consul.to
2026-06-18 16:40:33
(8 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฉ๐ช
gadix
2026-06-18 16:23:43
(9 hours ago)
[18/Jun/2026:18:07:23.719637 +0200] ajQXu1NKS0HZnHyuElwOJwAAAMY 206.72.199.210 37438 127.0.0.1 7081
...
show more
[18/Jun/2026:18:07:23.719637 +0200] ajQXu1NKS0HZnHyuElwOJwAAAMY 206.72.199.210 37438 127.0.0.1 7081
[18/Jun/2026:18:07:23.848270 +0200] ajQXu1NKS0HZnHyuElwOKAAAANc 206.72.199.210 37440 127.0.0.1 7081
[18/Jun/2026:18:23:42.883710 +0200] ajQbjlNKS0HZnHyuElwOigAAANA 206.72.199.210 51736 127.0.0.1 7081
...
show less
Web App Attack
Anonymous
2026-06-18 16:12:27
(9 hours ago)
[redacted] 206.72.199.210 - - [18/Jun/2026:18:12:26 +0200] "GET //assets/admin/bower_components/jque ...
show more
[redacted] 206.72.199.210 - - [18/Jun/2026:18:12:26 +0200] "GET //assets/admin/bower_components/jquery.filer/php/readme.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
[redacted] 206.72.199.210 - - [18/Jun/2026:18:12:26 +0200] "GET //assets/admin/bower_components/jquery.filer/php/readme.txt HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
[redacted] 206.72.199.210 - - [18/Jun/2026:18:12:26 +0200] "GET //admin/jquery-file-upload/server/php/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
[redacted] 206.72.199.210 - - [18/Jun/2026:18:12:26 +0200] "GET //admin/jquery-file-upload/server/php/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.
...
show less
Hacking
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-06-18 16:00:12
(9 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 12
Exploited Host
Web App Attack
๐ซ๐ท
Lacrimosa99
2026-06-18 15:25:51
(10 hours ago)
206.72.199.210 - - [18/Jun/2026:17:25:50 +0200] "GET //file-manager/initialize HTTP/1.1" 404 363 "-" ...
show more
206.72.199.210 - - [18/Jun/2026:17:25:50 +0200] "GET //file-manager/initialize HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
206.72.199.210 - - [18/Jun/2026:17:25:50 +0200] "GET //vendor/laravel-filemanager/js/script.js HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
206.72.199.210 - - [18/Jun/2026:17:25:50 +0200] "GET //assets/admin/bower_components/jquery.filer/php/readme.txt HTTP/1.1" 404 363 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/132.0.0.0 Safari/537.36"
...
show less
Web Spam
Anonymous
2026-06-18 15:13:59
(10 hours ago)
SOHODE WEBEXPLOIT 206.72.199.210 (vps3352771.trouble-free.net)
Web App Attack