🇺🇦
URAN Publishing Service
2026-06-05 04:25:26
(2 minutes ago)
208.84.101.75 - - [05/Jun/2026:07:25:22 +0300] "GET /.env HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Macint ...
show more
208.84.101.75 - - [05/Jun/2026:07:25:22 +0300] "GET /.env HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.3 Safari/605.1.15"
208.84.101.75 - - [05/Jun/2026:07:25:22 +0300] "GET /laravel/.env HTTP/1.1" 404 712 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0"
...
show less
Web App Attack
🇧🇪
sid3windr
2026-06-05 04:22:25
(5 minutes ago)
GET /.git/FETCH_HEAD (Tarpitted for , wasted 120B)
Web App Attack
🇩🇪
FeG Deutschland
2026-06-05 03:48:13
(40 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
2026-06-05 02:26:26
(2 hours ago)
[Fri Jun 05 04:26:25.664287 2026] [:error] [pid 2003693:tid 2003693] [client 208.84.101.75:30112] Mo ...
show more
[Fri Jun 05 04:26:25.664287 2026] [:error] [pid 2003693:tid 2003693] [client 208.84.101.75:30112] ModSecurity: Warning. Matched "Operator `Within' with parameter `.ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll (447 characters omitted)' against variable `TX:EXTENSION' (Value: `.old/' ) [file "/usr/local/modsecurity-crs/rules/REQUEST-920-PROTOCOL-ENFORCEMENT.conf"] [line "1127"] [id "920440"] [rev ""] [msg "URL file extension is restricted by policy"] [data ".old"] [severity "2"] [ver "OWASP_CRS/4.28.0-dev"] [maturity "0"] [accuracy "0"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-protocol"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "OWASP_CRS/PROTOCOL-ENFORCEMENT"] [tag "capec/1000/210/272"] [uri "/.env.old"] [unique_id "178062638585.929934"] [ref "o4,4o5,3v5,8t
...
show less
Web App Attack
2026-06-05 02:10:06
(2 hours ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
🇩🇪
Philister11
2026-06-05 01:53:52
(2 hours ago)
CrowdSec: crowdsecurity/http-crawl-non_statics (US/AS22295)
Bad Web Bot
Web App Attack
🇫🇷
bellovacorp
2026-06-05 01:46:27
(2 hours ago)
Automated abuse detection (CrowdSec) - scenario: http-crawl-non_statics
Port Scan
Web App Attack
🇩🇪
paissangroup
2026-06-05 01:38:30
(2 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
Starburst SysOp Team
2026-06-05 01:10:43
(3 hours ago)
Restricted File Access Attempt. Matched phrase ".yarnrc" at REQUEST_FILENAME. (930130-mnz6-1)
Hacking
Web App Attack
🇦🇺
rubixstudios
2026-06-05 01:07:02
(3 hours ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
🇬🇧
andypiper
2026-06-05 01:01:09
(3 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-06-05 00:44:19
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 208.84.101.75 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 208.84.101.75 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 20:44:14.642017 2026] [security2:error] [pid 16569:tid 16569] [client 208.84.101.75:35368] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.zoboz.com"] [uri "/.env.local.orig"] [unique_id "aiIb3rsW3o8rOO8ocyRoywAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
XICTRON
2026-06-05 00:15:04
(4 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
2026-06-04 23:38:25
(4 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 208.84.101.75 (US/United States/-)
SQL Injection
🇫🇮
pixiekat
2026-06-04 22:56:34
(5 hours ago)
[Thu Jun 04 23:56:33.598086 2026] [security2:error] [pid 280679:tid 280723] [client 208.84.101.75:20 ...
show more
[Thu Jun 04 23:56:33.598086 2026] [security2:error] [pid 280679:tid 280723] [client 208.84.101.75:20330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.26.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "katy.devilishseraph.net"] [uri "/server/.env"] [unique_id "aiICof7c5Ox_YAL1u4WsSAAAAFA"], referer: https://devilishseraph.net/server/.env
[Thu Jun 04 23:56:34.075686 2026] [security2:error] [pid 280679:tid 280722] [client 208.84.101.75:20330] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/etc/apache2/modsecurity-crs/coreruleset/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score:
...
show less
Web App Attack