๐ซ๐ท
SpaceHost-Server
2026-08-31 12:36:37
(14 hours ago)
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-08-30 22:04:43
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-29.
show less
Web App Attack
SSH
Hacking
๐ซ๐ท
largo-it.net
2026-08-30 10:27:26
(1 day ago)
[30/Aug/2026:12:27:24.460] HTTP 404 - GET /.git/config
[30/Aug/2026:12:27:25.141] HTTP 404 - GET /.e ...
show more
[30/Aug/2026:12:27:24.460] HTTP 404 - GET /.git/config
[30/Aug/2026:12:27:25.141] HTTP 404 - GET /.env
[30/Aug/2026:12:27:25.203] HTTP 404 - GET /.env.local
[30/Aug/2026:12:27:25.219] HTTP 404 - GET /.env.production
[30/Aug/2026:12:27:25.262] HTTP 404 - GET /.env.backup
[30/Aug/2026:12:27:25.291] HTTP 404 - GET /.env.old
[30/Aug/2026:12:27:25.350] HTTP 404 - GET /.env.save
[30/Aug/2026:12:27:25.376] HTTP 404 - GET /.env.staging
show less
Hacking
Bad Web Bot
Web App Attack
๐ฉ๐ช
macrob
2026-08-30 10:10:09
(1 day ago)
2026/08/30 10:10:07 [error] 730832#730832: *536448632 access forbidden by rule, client: 34.155.178.3 ...
show more
2026/08/30 10:10:07 [error] 730832#730832: *536448632 access forbidden by rule, client: 34.155.178.38, server: finami.vn, request: "GET /.git/config HTTP/2.0", host: "finami-vn.com"
2026/08/30 10:10:08 [error] 730836#730836: *536448756 access forbidden by rule, client: 34.155.178.38, server: finami.vn, request: "GET /.env HTTP/2.0", host: "finami-vn.com"
2026/08/30 10:10:08 [error] 730832#730832: *536448632 access forbidden by rule, client: 34.155.178.38, server: finami.vn, request: "GET /.env.local HTTP/2.0", host: "finami-vn.com"
...
show less
Web App Attack
๐บ๐ธ
Epimetheus
2026-08-30 03:26:31
(1 day ago)
Zombie network / Bot scanner detected:
[GET] /actuator/gateway/routes
[GET] /@fs/etc/passwd
[GET] / ...
show more
Zombie network / Bot scanner detected:
[GET] /actuator/gateway/routes
[GET] /@fs/etc/passwd
[GET] /panel
[GET] /firebase-adminsdk.json
[GET] /@fs/proc/self/cwd/.env.local
[GET] /firebase-key.json
[GET] /gcp-credentials.json
[GET] /settings.php
[GET] /config.inc.php.bak
[GET] /config.php.old
[GET] /data.sql
[GET] /backup.tar
[GET] /htdocs.zip
[GET] /html.zip
[GET] /src.zip
[GET] /db.zip
[GET] /config.zip
[GET] /database.zip
[GET] /app.zip
[GET] /.vault-token
[GET] /private.key
[GET] /.kube/config
[GET] /terraform.tfvars
[GET] /kubeconfig
[GET] /server.key
[GET] /.bash_history
[GET] /.idea/dataSources.xml
[GET] /.config/composer/auth.json
[GET] /.gitconfig
[GET] /.zsh_history
[GET] /env.json
[GET] /config/secrets.yml
UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Bad Web Bot
Exploited Host
Web App Attack
๐ซ๐ท
dynamix
2026-08-30 02:10:31
(2 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
Epimetheus
2026-08-30 01:56:31
(2 days ago)
Unauthorized access attempts:
[GET] /database.sql
[GET] /@fs/proc/self/cwd/.env
[GET] /@fs/proc/sel ...
show more
Unauthorized access attempts:
[GET] /database.sql
[GET] /@fs/proc/self/cwd/.env
[GET] /@fs/proc/self/cwd/.env.local
[GET] /.git-credentials
[GET] /configuration.php.bak
[GET] /.env.production.bak
[GET] /htdocs/.env
[GET] /backend/.env
UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Web App Attack
๐ซ๐ท
Octopuce
2026-08-29 17:49:35
(2 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
๐ฉ๐ช
0x44
2026-08-29 14:59:43
(2 days ago)
Web probing - Method Not Allowed
Web App Attack
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-08-29 14:56:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.155.178.38 (38.178.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.178.38 (38.178.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Aug 29 10:56:17.175850 2026] [security2:error] [pid 9971:tid 9971] [client 34.155.178.38:57370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uccryakima.org"] [uri "/.git/config"] [unique_id "apLzEWnfxV4TR5z52BSpjwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-08-29 14:50:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-08-29 13:50:52
(2 days ago)
Excessive 404/403 errors
Brute-Force