๐ฉ๐ช
Petros Stefanakis
2026-10-23 12:47:05
(3 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.153.214.6 (JP/Japan/6.214.153.34.bc. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.153.214.6 (JP/Japan/6.214.153.34.bc.googleusercontent.com)
show less
SQL Injection
๐ต๐ฑ
Budyn
2026-10-23 12:40:31
(3 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: elastic.budyn.top | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request] | HEADERS: {"X-Forwarded-Proto":"https","Cf-Visitor":"{\"scheme\":\"https\"}","Cf-Ipcountry":"JP","Cf-Connecting-Ip":"34.153.214.6","Cdn-Loop":"cloudflare; loops=1","Connection":"Keep-Alive","Cf-Ray":"a4f0cf8b6f1025d7-NRT","Accept-Encoding":"gzip, br","Accept":"*\/*","Next-Action":"x","X-Nextjs-Request-Id":
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-23 12:21:45
(4 hours ago)
Excessive 404/403 errors
Brute-Force
๐ง๐ท
dermatovirtual
2026-10-23 08:46:18
(7 hours ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 204 unauthorized requests recorded between 2026-10-22 08:42:56 UTC and 2026-10-22 08:43:52 UTC (rate: ~204 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-22 08:43:51 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /preview/.env -> HTTP 404 [CLIENT: 34.153.214.6]
[2026-10-22 08:43:52 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /development/.env -> HTTP 404 [CLIENT: 34.153.214.6]
[2026-10-22 08:43:52 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /production/.env -> HTTP 404 [CLIENT: 34.153.214.6]
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-22 11:14:12
(1 day ago)
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.153.214.6 - - \[22/Oct/2026:13:13:53 +0200\] "GET /.git/config HTTP/1.1" 404 2140 "-" "Mozilla/5.0 \(X11\; Linux x86_64\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ง๐ท
dermatovirtual
2026-10-22 08:45:30
(1 day ago)
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web ...
show more
Dermato Virtual CSIRT: Malicious web exploit/scanning probes against app.dermatovirtual.com.br (Web Server Ports 80/443). 151 unauthorized requests recorded between 2026-10-22 08:42:56 UTC and 2026-10-22 08:43:38 UTC (rate: ~151 req/min). Edge perimeter firewall drop active.
Log sample:
[2026-10-22 08:43:36 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /mailer/.env -> HTTP 404 [CLIENT: 34.153.214.6]
[2026-10-22 08:43:36 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /mail/.env -> HTTP 404 [CLIENT: 34.153.214.6]
[2026-10-22 08:43:36 UTC] IP: 34.153.214.6 - W3C IIS (Port 443): GET /logs/.env -> HTTP 404 [CLIENT: 34.153.214.6]
show less
Bad Web Bot
Web App Attack
๐จ๐ฆ
zXero
2026-10-22 07:54:49
(1 day ago)
Fail2Ban automatic report - jail: no-wordpress
Brute-Force
SSH
DDoS Attack
๐ณ๐ฑ
Alt255
2026-10-22 07:20:51
(1 day ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.153.214.6 - - [22/Oct/2026:09:20:49 +0200] "GET /.git/config HTTP/1.1" 404 2142 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
webanyone
2026-10-22 02:23:10
(1 day ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-22 01:45:38
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ฉ๐ช
LRob
2026-10-22 01:17:20
(1 day ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 00:01:13
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ท๐ด
clauss
2026-10-21 23:51:13
(1 day ago)
34.153.214.6 - - [22/Oct/2026:02:51:13 +0300] "GET /phpinfo.php HTTP/2.0" 403 0 "-" "Mozilla/5.0 (X1 ...
show more
34.153.214.6 - - [22/Oct/2026:02:51:13 +0300] "GET /phpinfo.php HTTP/2.0" 403 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.153.214.6 - - [22/Oct/2026:02:51:13 +0300] "GET /info.php HTTP/2.0" 301 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-21 22:23:52
(1 day ago)
Try to access /.git/config
Web App Attack
๐ญ๐ณ
unph
2026-10-21 12:22:35
(2 days ago)
Intento de acceso sospechoso bloqueado por AbuseIPDB Blocker Plugin
Brute-Force