๐ฉ๐ช
ghostwarriors
2026-09-25 04:50:03
(1 hour ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-25 04:23:59
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 00:23:53.613989 2026] [security2:error] [pid 30330:tid 30330] [client 34.148.242.77:48380] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mta-sts.plugsinc.com"] [uri "/.git/config"] [unique_id "arX3We3Bj6mn17GhiHAjoQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-25 04:20:07
(1 hour ago)
34.148.242.77 - - [25/Sep/2026:06:20:01 +0200] "GET /.env.local HTTP/1.1" 404 518 "-" "Mozilla/5.0 ( ...
show more
34.148.242.77 - - [25/Sep/2026:06:20:01 +0200] "GET /.env.local HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.242.77 - - [25/Sep/2026:06:20:01 +0200] "GET /.env.production HTTP/1.1" 301 613 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.242.77 - - [25/Sep/2026:06:20:01 +0200] "GET /.env.production HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.242.77 - - [25/Sep/2026:06:20:02 +0200] "GET /.env.staging HTTP/1.1" 301 607 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.242.77 - - [25/Sep/2026:06:20:02 +0200] "GET /.env.staging HTTP/1.1" 404 518 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML,
show less
Web App Attack
Hacking
๐บ๐ธ
kosada.com
2026-09-25 03:37:50
(2 hours ago)
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla ...
show more
Repeated exploit attempts, for example: /.env.staging /.env (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
๐ซ๐ฎ
Kimmo Rieskaniemi
2026-09-25 02:55:11
(3 hours ago)
CrowdSec triggered crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ต๐ฑ
srebrakowski.com
2026-09-25 02:50:11
(3 hours ago)
crowdsec/crowdsecurity/appsec-vpatch
Brute-Force
๐ต๐ฑ
maciejka
2026-09-25 02:07:23
(4 hours ago)
34.148.242.77 - - [25/Sep/2026:04:07:23 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 ...
show more
34.148.242.77 - - [25/Sep/2026:04:07:23 +0200] "GET /mailer/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.148.242.77 - - [25/Sep/2026:04:07:23 +0200] "GET /mail/.env HTTP/1.1" 404 189 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
...
show less
Bad Web Bot
๐ฆ๐บ
Klaverstyn
2026-09-25 01:56:23
(4 hours ago)
Excessive HTTP request rate
Web App Attack
๐ซ๐ท
phoenix1jl96
2026-09-25 01:47:47
(4 hours ago)
2026/09/25 03:47:47 [error] 1353769#1353769: *227387 open() "/home/user-data/www/default/mailer/.env ...
show more
2026/09/25 03:47:47 [error] 1353769#1353769: *227387 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.148.242.77, server: mta-sts.lucasmaths.fr, request: "GET /mailer/.env HTTP/1.1", host: "mta-sts.lucasmaths.fr"
2026/09/25 03:47:47 [error] 1353769#1353769: *227387 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.148.242.77, server: mta-sts.lucasmaths.fr, request: "GET /mail/.env HTTP/1.1", host: "mta-sts.lucasmaths.fr"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 19:18:46
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:18:41.195262 2026] [security2:error] [pid 7154:tid 7154] [client 34.148.242.77:55542] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ppc.wisk.org"] [uri "/.git/config"] [unique_id "arV3kaJyewDuQ7VEc5qfhAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 17:57:59
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:57:52.174382 2026] [security2:error] [pid 16409:tid 16409] [client 34.148.242.77:57780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pozzolan.org"] [uri "/.git/config"] [unique_id "arVkoA6N0XGFHDX41arKgQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
Stara
2026-09-24 02:52:57
(1 day ago)
ModSecurity detected web attack - .env/config probing or SQLi/Code injection (Rule 949110)
Brute-Force
Hacking
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-09-24 01:30:46
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 00:41:33
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.242.77 (77.242.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:41:30.759002 2026] [security2:error] [pid 27611:tid 27611] [client 34.148.242.77:45980] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "multimediaperformances.com"] [uri "/.git/config"] [unique_id "arHOuhY4F7fJNnLWJF4IWQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-09-21 23:00:05
(3 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack