🇺🇸
interbiznw.com
2026-10-22 15:56:36
(31 minutes ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack
🇧🇪
cmbplf
2026-10-22 15:43:23
(44 minutes ago)
698 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-22 15:42:49
(45 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 11:42:43.114789 2026] [security2:error] [pid 23647:tid 23647] [client 34.155.86.140:33106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayoutown.org"] [uri "/.git/config"] [unique_id "atou81pa4tcL9m5MBb4R8wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
Jova
2026-10-22 15:07:41
(1 hour ago)
Probing a web server for sensitive files (.env, backups, configs): 3 requests.
Web App Attack
🇨🇦
Anytech
2026-10-22 13:39:03
(2 hours ago)
Blocked by ConnMonitor
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:33:08
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:33:01.414084 2026] [security2:error] [pid 5571:tid 5571] [client 34.155.86.140:46916] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bayarealangarts.com"] [uri "/.git/config"] [unique_id "atoQjS3Ps0ZdIQkEC_44_gAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
janbro
2026-10-22 11:10:27
(5 hours ago)
Automated attempt to access sensitive configuration files.
Port Scan
Hacking
Web App Attack
🇬🇧
consul.to
2026-10-22 10:16:27
(6 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
zynex
2026-10-22 09:59:38
(6 hours ago)
URL Probing: /.env
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:30:42
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.86.140 (140.86.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:30:37.002947 2026] [security2:error] [pid 6626:tid 6626] [client 34.155.86.140:47178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "baumannarchitecture.com"] [uri "/.git/config"] [unique_id "atnXvUEPgxEFac8MI8Ip0AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-10-22 08:54:31
(7 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
altenglaner
2026-10-22 08:35:41
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
🇳🇱
Site.eu
2026-10-22 08:27:46
(8 hours ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
ghostwarriors
2026-10-22 08:20:08
(8 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-10-22 08:08:59
(8 hours ago)
34.155.86.140 - - [22/Oct/2026:10:08:55 +0200] "GET /.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; L ...
show more
34.155.86.140 - - [22/Oct/2026:10:08:55 +0200] "GET /.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.86.140 - - [22/Oct/2026:10:08:55 +0200] "GET /.env.local HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.86.140 - - [22/Oct/2026:10:08:56 +0200] "GET /.env.staging HTTP/1.1" 404 4579 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.86.140 - - [22/Oct/2026:10:08:56 +0200] "GET /.env.development HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.86.140 - - [22/Oct/2026:10:08:57 +0200] "GET /.env.test HTTP/1.1" 404 513 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.86.140 - - [22/Oct/2026:10:08:57 +0200] "
show less
Bad Web Bot