๐ฉ๐ช
DEV-DNS
2026-10-26 09:36:47
(16 hours ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ซ๐ท
spot
2026-10-25 20:28:21
(1 day ago)
34.162.175.192 - - [25/Oct/2026:20:28:21 +0000] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 ...
show more
34.162.175.192 - - [25/Oct/2026:20:28:21 +0000] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-10-25 19:43:25
(1 day ago)
[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apach ...
show more
[cb17al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.162.175.192 - - [25/Oct/2026:20:43:23 +0100] "GET /.git/config HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [25/Oct/2026:20:43:23 +0100] "GET /.env HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [25/Oct/2026:20:43:23 +0100] "GET /.env.local HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [25/Oct/2026:20:43:23 +0100] "GET /.env.production HTTP/1.1" 404 2105 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 13:42:55
(1 day ago)
[ti-14al] Web exploit scanning: 7 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-14al] Web exploit scanning: 7 suspicious requests detected by fail2ban jail <name>. Example: 34.162.175.192 - - [19/Oct/2026:00:14:01 +0200] "GET /.git/config HTTP/1.1" 301 580 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [19/Oct/2026:00:14:01 +0200] "GET /.env HTTP/1.1" 301 566 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [19/Oct/2026:00:14:02 +0200] "GET /.env.local HTTP/1.1" 301 578 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.162.175.192 - - [19/Oct/2026:00:14:02 +0200] "GET /.env.production HTTP/1.1" 301 588 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-25 10:20:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-25 10:06:00
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
masterguru
2026-10-25 09:44:47
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-25 06:17:25
(1 day ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
kosada.com
2026-10-25 06:03:40
(1 day ago)
Repeated exploit attempts, for example: / {x22thenx22: x22$1:__proto__:thenx22, x22statusx22: x22res ...
show more
Repeated exploit attempts, for example: / {x22thenx22: x22$1:__proto__:thenx22, x22statusx22: x22resolved_modelx22, x22reasonx22: -1, x22valuex22: x22{x5cx22thenx5cx22:x5cx22$B1337x5cx22}x22 (HTTP/1.1 port 443, user agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36")
show less
Web App Attack
๐ช๐ธ
Francisco Vallejo
2026-10-25 05:53:15
(1 day ago)
[Sun Oct 25 06:53:14.601179 2026] [security2:error] [pid 3377633:tid 3377652] [client 34.162.175.192 ...
show more
[Sun Oct 25 06:53:14.601179 2026] [security2:error] [pid 3377633:tid 3377652] [client 34.162.175.192:33042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "camara1.franvallejo.es"] [uri "/"] [unique_id "at2ZSisCTxl8CTnnIoIRrgAAABE"]
[Sun Oct 25 06:53:14.714133 2026] [security2:error] [pid 3377633:tid 3377649] [client 34.162.175.192:33042] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.8
...
show less
Brute-Force
SSH
๐ฌ๐ง
rakkor
2026-10-25 05:03:26
(1 day ago)
2026/10/25 05:03:24 [error] 9976#9976: *435373 open() "/usr/syno/synoman/.git/config" failed (2: No ...
show more
2026/10/25 05:03:24 [error] 9976#9976: *435373 open() "/usr/syno/synoman/.git/config" failed (2: No such file or directory), client: 34.162.175.192, server: cam.rakkor.uk, request: "GET /.git/config HTTP/1.1", host: "cam.rakkor.uk"
2026/10/25 05:03:25 [error] 9976#9976: *435373 open() "/usr/syno/synoman/.env" failed (2: No such file or directory), client: 34.162.175.192, server: cam.rakkor.uk, request: "GET /.env HTTP/1.1", host: "cam.rakkor.uk"
...
show less
Brute-Force
Hacking
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-25 04:17:40
(1 day ago)
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[livebd] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.162.175.192 - - [25/Oct/2026:05:17:35 +0100] "GET /.git/config HTTP/1.1" 404 2162 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-10-25 02:42:21
(1 day ago)
(security_scan) Sensitive File Scan Blocked 34.162.175.192 (US/United States/192.175.162.34.bc.googl ...
show more
(security_scan) Sensitive File Scan Blocked 34.162.175.192 (US/United States/192.175.162.34.bc.googleusercontent.com)
show less
Hacking
๐ฆ๐บ
CalmBrain
2026-10-25 02:06:03
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
e.fierstra
2026-10-25 01:59:50
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack