๐ง๐ท
Peregrine
2026-06-07 03:09:44
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.git/config HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.local HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.production HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.development HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /backend/.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.aws/credentials HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.git/HEAD HTTP/1.1" 404 414
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-05 07:06:57
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jun 05 03:06:44.718524 2026] [security2:error] [pid 10602:tid 10602] [client 2a02:4780:75:7547::1:56992] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "804websolutions.com"] [uri "/.env.production"] [unique_id "aiJ1hNjGWctJ0IxmO7Q6TgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-06-05 03:10:40
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.git/config HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.local HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.production HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.development HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /backend/.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.aws/credentials HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.git/HEAD HTTP/1.1" 404 414
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-06-05 00:32:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 20:32:34.139215 2026] [security2:error] [pid 16157:tid 16157] [client 2a02:4780:75:7547::1:41424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "analytics.searchenginesubmit.org"] [uri "/.git/HEAD"] [unique_id "aiIZIuRshKu_t_ZVgc78EwAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-05 00:09:28
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 20:09:23.776558 2026] [security2:error] [pid 15317:tid 15330] [client 2a02:4780:75:7547::1:39814] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ammisr.com"] [uri "/.env"] [unique_id "aiITs9hA0LT4m-qKgCpM4AAAAMo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 23:49:46
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 19:49:38.886957 2026] [security2:error] [pid 6556:tid 6556] [client 2a02:4780:75:7547::1:57412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "animz.com"] [uri "/.git/HEAD"] [unique_id "aiIPEiXOehDdVGnS25OV_gAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-06-04 21:54:25
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 21:24:53
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 17:24:47.767522 2026] [security2:error] [pid 28221:tid 28221] [client 2a02:4780:75:7547::1:49552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "anchor07.com.breezentry.com"] [uri "/.git/HEAD"] [unique_id "aiHtH2elxPMMRqYKEEbhVwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-04 18:22:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): ...
show more
(mod_security) mod_security (id:210492) triggered by 2a02:4780:75:7547::1 (srv1724730.hstgr.cloud): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Jun 04 14:22:00.779458 2026] [security2:error] [pid 8885:tid 8885] [client 2a02:4780:75:7547::1:53270] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soulwolf.com"] [uri "/.git/HEAD"] [unique_id "aiHCSItUKzzImeI2Kp4_-gAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-06-04 15:40:00
(1 month ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
4server
2026-06-04 14:21:34
(1 month ago)
[ThuJun0416:21:30.2435222026][security2:error][pid3475716:tid3475749][client2a02:4780:75:7547::1:0]M ...
show more
[ThuJun0416:21:30.2435222026][security2:error][pid3475716:tid3475749][client2a02:4780:75:7547::1:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"solaristech.ch\"][uri\"/.env.production\"][unique_id\"aiGJ6v2WZ2On7lVUUkQUlAAAAAU\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฉ๐ช
Ba-Yu
2026-06-04 13:41:28
(1 month ago)
General hacking/exploits/scanning
Web Spam
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-06-03 22:02:56
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-02.
show less
Web App Attack
SSH
Hacking
๐ซ๐ท
Baking333
2026-06-03 09:49:45
(1 month ago)
[redacted] 2a02:4780:75:7547::1 - - [03/Jun/2026:10:49:42 +0100] "GET /.git/config HTTP/2.0" 301 296 ...
show more
[redacted] 2a02:4780:75:7547::1 - - [03/Jun/2026:10:49:42 +0100] "GET /.git/config HTTP/2.0" 301 296 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0" [redacted] 2a02:4780:75:7547::1 - - [03/Jun/2026:10:49:43 +0100] "GET /.git/HEAD HTTP/2.0" 301 296 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐ง๐ท
Peregrine
2026-06-03 06:18:40
(1 month ago)
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18 ...
show more
Fail2Ban Jail: tomcat-honeypot | Evidence: 2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.git/config HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.local HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.production HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /.env.development HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:29 -0300] "GET /backend/.env HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.aws/credentials HTTP/1.1" 404 414
2a02:4780:75:7547::1 162.158.63.78 - - [03/Jun/2026:03:18:30 -0300] "GET /.git/HEAD HTTP/1.1" 404 414
show less
Bad Web Bot