๐ณ๐ฑ
Site.eu
2026-10-06 23:24:26
(2 weeks ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Alt255
2026-10-05 10:37:41
(3 weeks ago)
[ti-02ov] Web exploit scanning: 3 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-02ov] Web exploit scanning: 3 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.139.223.123 - - [05/Oct/2026:12:37:28 +0200] "GET /img../.env HTTP/2.0" 403 535 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.139.223.123 - - [05/Oct/2026:12:37:28 +0200] "GET /assets../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
34.139.223.123 - - [05/Oct/2026:12:37:28 +0200] "GET /files../.env HTTP/2.0" 404 2004 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Hippoline
2026-10-05 09:59:19
(3 weeks ago)
[Mon Oct 05 11:58:11.226319 2026] [authz_core:error] [pid 22038] [client 34.139.223.123:42814] AH016 ...
show more
[Mon Oct 05 11:58:11.226319 2026] [authz_core:error] [pid 22038] [client 34.139.223.123:42814] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/.htpasswd
[Mon Oct 05 11:58:16.818608 2026] [authz_core:error] [pid 18766] [client 34.139.223.123:42778] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/phpinfo.php
[Mon Oct 05 11:58:16.868194 2026] [authz_core:error] [pid 22183] [client 34.139.223.123:42894] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/info.php
[Mon Oct 05 11:58:17.122613 2026] [authz_core:error] [pid 18413] [client 34.139.223.123:42938] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/pi.php
[Mon Oct 05 11:58:17.164100 2026] [authz_core:error] [pid 22177] [client 34.139.223.123:42866] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/app_dev.php
[Mon Oct 05 11:58:17.172903 2026] [authz_core:error] [pid 22183] [client 34
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-05 09:47:41
(3 weeks ago)
2026/10/05 10:47:39 [error] 3069275#3069275: *196446 access forbidden by rule, client: 34.139.223.12 ...
show more
2026/10/05 10:47:39 [error] 3069275#3069275: *196446 access forbidden by rule, client: 34.139.223.123, server: api.betatechnologies.info, request: "GET /static../.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/05 10:47:39 [error] 3069275#3069275: *196446 access forbidden by rule, client: 34.139.223.123, server: api.betatechnologies.info, request: "GET /media../.env HTTP/2.0", host: "api.betatechnologies.info"
2026/10/05 10:47:39 [error] 3069275#3069275: *196446 access forbidden by rule, client: 34.139.223.123, server: api.betatechnologies.info, request: "GET /uploads../.env HTTP/2.0", host: "api.betatechnologies.info"
show less
Brute-Force
Web App Attack
๐ซ๐ท
Hippoline
2026-10-05 07:21:05
(3 weeks ago)
[Mon Oct 05 09:20:56.812324 2026] [authz_core:error] [pid 7385] [client 34.139.223.123:52836] AH0163 ...
show more
[Mon Oct 05 09:20:56.812324 2026] [authz_core:error] [pid 7385] [client 34.139.223.123:52836] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/.htpasswd
[Mon Oct 05 09:20:58.184829 2026] [authz_core:error] [pid 9149] [client 34.139.223.123:52914] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/document.php
[Mon Oct 05 09:21:00.481152 2026] [authz_core:error] [pid 7385] [client 34.139.223.123:52836] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/phpinfo.php
[Mon Oct 05 09:21:03.003708 2026] [authz_core:error] [pid 9177] [client 34.139.223.123:53000] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/info.php
[Mon Oct 05 09:21:03.019657 2026] [authz_core:error] [pid 9178] [client 34.139.223.123:52974] AH01630: client denied by server configuration: /var/www/beaufort-online.lu/web/test.php
[Mon Oct 05 09:21:03.032942 2026] [authz_core:error] [pid 4304] [client 34.13
...
show less
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-10-05 06:40:04
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 06:36:32
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:36:25.870581 2026] [security2:error] [pid 7214:tid 7214] [client 34.139.223.123:54334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "praiseworthy.info"] [uri "/media../.env"] [unique_id "asNFacnuVIrczMxnOd88NgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 06:11:23
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 02:11:16.344244 2026] [security2:error] [pid 13349:tid 13349] [client 34.139.223.123:46818] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oss-in-atm.info"] [uri "/static../.env"] [unique_id "asM_hE-sT-xCf7V6ZJ2XfwAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Octopuce
2026-10-05 05:59:05
(3 weeks ago)
Aggressive web search of vulnerable pages: /api/console/api_server?sense_version=%40%40SENSE_VERSION ...
show more
Aggressive web search of vulnerable pages: /api/console/api_server?sense_version=%40%40SENSE_VERSION&apis=../../../../../../.env /openapi.json ...
show less
Web App Attack
๐บ๐ธ
n2nguyenn2nguyen
2026-10-05 05:37:01
(3 weeks ago)
Blocked by YFC Security on https://1904.brixzly.com โ type: directory_scan_attempts
Web App Attack
๐บ๐ธ
hyena
2026-10-05 05:32:02
(3 weeks ago)
Repeated mod_security events.
Web App Attack
๐ฌ๐ง
openstrike.co.uk
2026-10-05 05:14:24
(3 weeks ago)
9 attacks on password/key grabbing URLs:
GET /.git-credentials HTTP/1.1
Hacking
Anonymous
2026-10-05 04:43:04
(3 weeks ago)
[Mon Oct 05 06:42:58.838142 2026] [access_compat:error] [pid 2031712:tid 2031712] [client 34.139.223 ...
show more
[Mon Oct 05 06:42:58.838142 2026] [access_compat:error] [pid 2031712:tid 2031712] [client 34.139.223.123:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.dockerenv, referer: https://loretlargent.info/.dockerenv
[Mon Oct 05 06:43:02.373594 2026] [authz_core:error] [pid 1911885:tid 1911885] [client 34.139.223.123:0] AH01630: client denied by server configuration: /var/www/wordpress/loretlargent.info/server-status, referer: https://loretlargent.info/server-status
[Mon Oct 05 06:43:02.376098 2026] [access_compat:error] [pid 2031869:tid 2031869] [client 34.139.223.123:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/credentials
[Mon Oct 05 06:43:02.508614 2026] [access_compat:error] [pid 2031719:tid 2031719] [client 34.139.223.123:0] AH01797: client denied by server configuration: /var/www/wordpress/loretlargent.info/.aws, referer: https://loretlargent.info/.aws/confi
...
show less
Web Spam
Web App Attack
๐ซ๐ท
j-tap
2026-10-05 04:34:44
(3 weeks ago)
WordPress honeypot: automated scanner (xmlrpc / installer / .env / direct login POST)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 04:15:07
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.139.223.123 (123.223.139.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 00:15:02.413801 2026] [security2:error] [pid 16814:tid 16814] [client 34.139.223.123:55960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kiuchi.info"] [uri "/.htpasswd"] [unique_id "asMkRll-idNk9P2eyxAwagAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack