๐ฉ๐ช
sternwart
2026-10-20 14:50:56
(2 hours ago)
Automatisch erkannt: Zugriff auf /.git/config (fredy.xn--waschbr-alarm-gfb.ch)
Web App Attack
Bad Web Bot
๐ธ๐ช
vaia.cloud
2026-10-20 14:30:02
(3 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 14:13:28
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.194.207 (207.194.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.194.207 (207.194.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 10:13:22.658824 2026] [security2:error] [pid 25893:tid 25893] [client 34.175.194.207:41214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fredlandia.com"] [uri "/.git/config"] [unique_id "atd3AvOVnf4B7etW-60FsgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฟ๐ฆ
Megasurf
2026-10-20 14:11:33
(3 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firew ...
show more
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
show less
Web App Attack
๐ฉ๐ช
ghel
2026-10-20 13:19:10
(4 hours ago)
34.175.194.207 - - [20/Oct/2026:15:19:05 +0200] "GET /.git/config HTTP/1.1" 403 528 "-" "Mozilla/5.0 ...
show more
34.175.194.207 - - [20/Oct/2026:15:19:05 +0200] "GET /.git/config HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.194.207 - - [20/Oct/2026:15:19:05 +0200] "GET /.env HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.194.207 - - [20/Oct/2026:15:19:06 +0200] "GET /.env.local HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.194.207 - - [20/Oct/2026:15:19:06 +0200] "GET /.env.production HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.194.207 - - [20/Oct/2026:15:19:06 +0200] "GET /.env.staging HTTP/1.1" 403 528 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
marten_o
2026-10-20 10:13:33
(7 hours ago)
34.175.194.207 - - [20/Oct/2026:12:13:33 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 578 "-" "Mozilla ...
show more
34.175.194.207 - - [20/Oct/2026:12:13:33 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 500 578 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 390 776
...
show less
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-20 10:02:57
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-20 10:02:07
(7 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 27
Exploited Host
Web App Attack
๐บ๐ธ
Omega Threat-ID
2026-10-20 10:01:08
(7 hours ago)
Omega Point Threat ID honeypot sensor observed: abuse-reported
Port Scan
๐ฉ๐ช
MBombeck
2026-10-20 09:33:52
(8 hours ago)
Fail2Ban/traefik-botsearch on apps-01: banned after 5 failures
Web App Attack
๐ซ๐ท
cydit.eu
2026-10-20 09:24:35
(8 hours ago)
phpMyAdmin attack detected by fail2ban on thor.cydit.eu
Web App Attack
๐ซ๐ฎ
paissangroup
2026-10-20 09:11:18
(8 hours ago)
Multiple WAF Violations
Web App Attack
๐ง๐ช
cmbplf
2026-10-20 08:08:49
(9 hours ago)
20.480 4xx requests in 1 hour (3d6h39m)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-20 08:04:30
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.194.207 (207.194.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.194.207 (207.194.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:04:22.728547 2026] [security2:error] [pid 31870:tid 31870] [client 34.175.194.207:38670] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "franzcorpinc.com.kevinfranz.com"] [uri "/.git/config"] [unique_id "atcghqtaK_Cacgbv0zxnUgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ConsulHosting
2026-10-20 07:34:30
(10 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack