🇩🇪
[email protected]
2026-06-22 13:22:12
(1 hour ago)
Brute force 88 attempts
DDoS Attack
SQL Injection
Brute-Force
SSH
🇷🇴
iulianh
2026-06-22 12:40:03
(2 hours ago)
80,443
Brute-Force
SSH
🇺🇦
URAN Publishing Service
2026-06-22 12:18:29
(2 hours ago)
208.84.102.178 - - [22/Jun/2026:15:18:28 +0300] "GET /wp-content/debug.log HTTP/1.1" 404 731 "-" "Mo ...
show more
208.84.102.178 - - [22/Jun/2026:15:18:28 +0300] "GET /wp-content/debug.log HTTP/1.1" 404 731 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
...
show less
Web App Attack
🇧🇪
voormedia
2026-06-22 11:30:12
(3 hours ago)
Accessed trap at '/.env'
Web App Attack
🇺🇸
Matthew Ping
2026-06-22 11:00:02
(3 hours ago)
ModSecurity rule 949110 triggered on wp3. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇭🇺
DumaNet
2026-06-22 10:21:00
(4 hours ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jun 22. 01:51:52
Source IP: 208.84 ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jun 22. 01:51:52
Source IP: 208.84.102.178
Portion of the log(s):
208.84.102.178 - [22/Jun/2026:01:51:52 +0200] "GET /.env.production HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
208.84.102.178 - [22/Jun/2026:01:51:52 +0200] "GET /.env.backup HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
208.84.102.178 - [22/Jun/2026:01:51:52 +0200] "GET /config/credentials.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0.0.0"
208.84.102.178 - [22/Jun/2026:01:51:52 +0200] "GET /google-cloud.json HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36"
208.84.102.178 - [22/Jun/2026:01:51:52 +0200] "GET /firebas
show less
Web App Attack
Hacking
2026-06-22 10:05:07
(4 hours ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇬🇧
Axel
2026-06-22 09:50:02
(5 hours ago)
Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by pol ...
show more
Blocked by ModSecurity. Rule ID: 210730 Message: COMODO WAF: URL file extension is restricted by policy||discord-profile.pics|F|2 Phase: 2 Severity: CRITICAL URI: /wp-content/debug.log Server: UK-01
show less
Web App Attack
Hacking
SQL Injection
🇩🇪
Teufel100
2026-06-22 09:22:22
(5 hours ago)
ModSecurity rejected a query
Brute-Force
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-22 09:19:14
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 208.84.102.178 (-): 1 in the last 300 secs; Por ...
show more
(mod_security) mod_security (id:210492) triggered by 208.84.102.178 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 22 05:19:06.157989 2026] [security2:error] [pid 20954:tid 20954] [client 208.84.102.178:15598] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.powerlinemagazine.com"] [uri "/.env.local.copy"] [unique_id "ajj-Cv8NEfCpj8wwjdv7EAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-06-22 09:06:03
(5 hours ago)
208.84.102.178 - - [22/Jun/2026:12:05:43 +0300] "GET /wp-content/debug.log HTTP/1.1" 404 251 "-" "Mo ...
show more
208.84.102.178 - - [22/Jun/2026:12:05:43 +0300] "GET /wp-content/debug.log HTTP/1.1" 404 251 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0"
208.84.102.178 - - [22/Jun/2026:12:05:47 +0300] "GET /src/.env HTTP/1.1" 404 251 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇮🇪
Coolnagour
2026-06-22 08:34:07
(6 hours ago)
httpprobe: banned during check /
Web App Attack
🇩🇪
ger-stg-sifi1
2026-06-22 08:04:40
(6 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
FeG Deutschland
2026-06-22 07:43:13
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 127
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-06-22 07:24:23
(7 hours ago)
1.157 requests with url.path *credentials.json
560 requests with url.path *.git/*
323 requests wi ...
show more
1.157 requests with url.path *credentials.json
560 requests with url.path *.git/*
323 requests with url.path *config.json
135 requests with url.path *secrets.json
show less
Brute-Force
Bad Web Bot