🇺🇦
RatCommander
2026-06-13 03:06:51
(19 minutes ago)
CrowdSec: crowdsecurity/http-probing
Port Scan
Web App Attack
🇩🇪
FeG Deutschland
2026-06-13 02:41:01
(45 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
🇦🇹
Tobias Gion
2026-06-13 01:24:53
(2 hours ago)
Bad Web Bot
Web App Attack
🇬🇧
andypiper
2026-06-13 01:02:30
(2 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
Petros Stefanakis
2026-06-13 00:39:33
(2 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 208.84.100.108 (US/United States/-)
SQL Injection
2026-06-13 00:35:08
(2 hours ago)
Failed login attempt detected by Fail2Ban in plesk-modsecurity jail
Exploited Host
🇺🇸
nasset
2026-06-13 00:34:11
(2 hours ago)
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /config/default.json HTTP/1.1" 403 4829 "-" "Mo ...
show more
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /config/default.json HTTP/1.1" 403 4829 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /src/.env HTTP/1.1" 403 4829 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /.env.bak HTTP/1.1" 403 4829 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:149.0) Gecko/20100101 Firefox/149.0"
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /server/.env HTTP/1.1" 403 4829 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
208.84.100.108 - - [12/Jun/2026:17:34:11 -0700] "GET /firebase-adminsdk.json HTTP/1.1" 403 4829 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
MakoWish
2026-06-13 00:11:57
(3 hours ago)
Fuzzing for misconfigured web servers.
Hacking
Web App Attack
🇩🇪
LRob.fr
2026-06-13 00:01:27
(3 hours ago)
Repeated 403 errors, blocked by Fail2ban in custom-403 jail
Bad Web Bot
🇩🇪
Dominik Lysiak
2026-06-12 22:51:46
(4 hours ago)
208.84.100.108 - - [13/Jun/2026:00:51:44 +0200] "GET /.env.production.copy HTTP/1.1" 404 178 "-" "Mo ...
show more
208.84.100.108 - - [13/Jun/2026:00:51:44 +0200] "GET /.env.production.copy HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0"
208.84.100.108 - - [13/Jun/2026:00:51:44 +0200] "GET /.git/HEAD HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36 Edg/146.0.0.0"
208.84.100.108 - - [13/Jun/2026:00:51:46 +0200] "GET /.git/config HTTP/1.1" 404 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.4 Safari/605.1.15"
...
show less
Web App Attack
🇫🇷
Rom74
2026-06-12 22:19:35
(5 hours ago)
[Sat Jun 13 00:19:35.140097 2026] [security2:error] [pid 1896047:tid 131878573041344] [client 208.84 ...
show more
[Sat Jun 13 00:19:35.140097 2026] [security2:error] [pid 1896047:tid 131878573041344] [client 208.84.100.108:47408] [client 208.84.100.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "ton-espace.com"] [uri "/.env.test"] [unique_id "aiyF9-lqkwO729zuH19jvwAAAI4"]
[Sat Jun 13 00:19:35.143353 2026] [security2:error] [pid 1895465:tid 131877490906816] [client 208.84.100.108:47398] [client 208.84.100.108] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
Web App Attack
🇱🇻
garmtech.com
2026-06-12 22:16:07
(5 hours ago)
Attempted access to sensitive endpoint (/.env.save) detected. Automated scan or unauthorized probing ...
show more
Attempted access to sensitive endpoint (/.env.save) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇬🇧
poundawebsiteltd
2026-06-12 20:20:54
(7 hours ago)
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 208.84.100.108 - - [12/Jun/2026:2 ...
show more
Web App Attack (ModSecurity Block). Evidence: [REDACTED_DOMAIN]:80 208.84.100.108 - - [12/Jun/2026:21:20:49 +0100] GET /wp-content/debug.log HTTP/1.1 403 158 - Mozilla/5.0 (X11; Linux x86_64; rv:150.0) Gecko/20100101 Firefox/150.0
show less
Web App Attack
🇳🇱
ConsulHosting
2026-06-12 20:10:24
(7 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇧🇷
Halux
2026-06-12 17:39:55
(9 hours ago)
208.84.100.108 Probing protected path or service
Web App Attack