🇬🇧
knock
2026-11-03 12:29:07
UTC ·
(5 days ago)
Knock-Knock honeypot brute-force: HTTP (3 total hits)
Web App Attack
🇺🇸
HamSammich
2026-11-02 03:58:40
UTC ·
(6 days ago)
Automated sensor: 1 HTTP connection/probe attempts over the last 24h (latest 2026-11-02T03:58Z).
Port Scan
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-01 18:18:11
UTC ·
(6 days ago)
Web scan: request for a sensitive file (.env, .git, wp-config...)
Web App Attack
Bad Web Bot
🇺🇸
swalluw
2026-11-01 11:18:33
UTC ·
(1 week ago)
Web vulnerability scanning: request for /storage/.env (HTTP 404, GET) at 2026-11-01T11:18:33+00:00 - exploit probe, no legitimate use
Bad Web Bot
Web App Attack
🇸🇬
anotherwatcher
2026-11-01 10:46:18
UTC ·
(1 week ago)
bad bot
Bad Web Bot
🇨🇿
plzenskypruvodce.cz
2026-10-31 04:11:54
UTC ·
(1 week ago)
[Sat Oct 31 05:11:27.390832 2026] [authz_core:error] [pid 1659339:tid 1659387] [client 31.171.130.22:25051] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/plugins/index.php
[Sat Oct 31 05:11:53.203600 2026] ...
show more
[Sat Oct 31 05:11:27.390832 2026] [authz_core:error] [pid 1659339:tid 1659387] [client 31.171.130.22:25051] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/plugins/index.php
[Sat Oct 31 05:11:53.203600 2026] [authz_core:error] [pid 1659339:tid 1659389] [client 31.171.130.22:55525] AH01630: client denied by server configuration: /var/www/baletniskola-ok.cz/www/wp-content/style.php
...
show less
Web App Attack
🇩🇪
rodcr
2026-10-30 05:37:12
UTC ·
(1 week ago)
Cloudflare WAF 2026-10-30 04:32 - 2026-10-30 05:37 UTC, 2 requests: probed /wp-content/plugins/fix/000.php, //wp-admin/css/about.php | UA: Go-http-client/1.1
Hacking
Web App Attack
🇮🇹
keope
2026-10-22 20:53:28
UTC ·
(2 weeks ago)
CrowdSec Automated Sync - Reason: http:exploit
Brute-Force
Web App Attack
2026-10-21 23:46:25
UTC ·
(2 weeks ago)
Failed Wordpress Logins
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 10:31:31
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:30:52.151652 2026] [security2:error] [pid 8843:tid 8843] [client 31.171.130.22:64043] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 06:30:52.151652 2026] [security2:error] [pid 8843:tid 8843] [client 31.171.130.22:64043] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.151.28"] [uri "/vendor/laravel/.env"] [unique_id "atH83MUdetdh6E6v_aqMIQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-16 09:08:48
UTC ·
(3 weeks ago)
"GET /sites/all/libraries/mailchimp/.env HTTP/1.1"
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 07:29:29
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:29:17.715675 2026] [security2:error] [pid 30934:tid 30934] [client 31.171.130.22:46417] M ...
show more
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 03:29:17.715675 2026] [security2:error] [pid 30934:tid 30934] [client 31.171.130.22:46417] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.238"] [uri "/core/.env"] [unique_id "atHSTbVdLkXCCenJy25QAwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-16 04:54:33
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:54:15.944271 2026] [security2:error] [pid 6642:tid 6642] [client 31.171.130.22:33753] Mod ...
show more
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:54:15.944271 2026] [security2:error] [pid 6642:tid 6642] [client 31.171.130.22:33753] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.117"] [uri "/database/.env"] [unique_id "atGt9ygha5RorQv6nehxAQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-10-16 04:51:25
UTC ·
(3 weeks ago)
Brute force
Brute-Force
🇺🇸
TPI-Abuse
2026-10-16 04:09:38
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:09:13.955457 2026] [security2:error] [pid 10466:tid 10466] [client 31.171.130.22:58691] M ...
show more
(mod_security) mod_security (id:210492) triggered by 31.171.130.22 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 00:09:13.955457 2026] [security2:error] [pid 10466:tid 10466] [client 31.171.130.22:58691] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.122"] [uri "/app/config/.env"] [unique_id "atGjaYOLE-iSmNPwgWwz1gAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
