🇩🇪
netclix.gr
2026-11-12 08:17:37
UTC ·
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.18.145.61 (QA/Qatar/61.145.18.34.bc.googleusercontent.com)
SQL Injection
🇳🇱
Savvii
2026-11-12 07:28:34
UTC ·
(2 days ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-12 05:53:25
UTC ·
(2 days ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.18.145.61 - - [12/Nov/2026:06:53:03 +0100] "GET /.git/config HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.18.145.61 - - [12/Nov/2026:06:53:03 +0100] "GET /.git/config HTTP/1.1" 301 488 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-12 04:55:05
UTC ·
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
JonathanYoung2161
2026-11-12 00:44:48
UTC ·
(2 days ago)
foosballpad.simplifiedmedia.net 34.18.145.61 - - [11/Nov/2026:18:44:45 -0600] "GET /.git/config HTTP/2.0" 403 2589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
foosballpad ...
show more
foosballpad.simplifiedmedia.net 34.18.145.61 - - [11/Nov/2026:18:44:45 -0600] "GET /.git/config HTTP/2.0" 403 2589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
foosballpad.simplifiedmedia.net 34.18.145.61 - - [11/Nov/2026:18:44:46 -0600] "GET /.env HTTP/2.0" 403 2589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
foosballpad.simplifiedmedia.net 34.18.145.61 - - [11/Nov/2026:18:44:46 -0600] "GET /.env.local HTTP/2.0" 403 2589 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇩🇪
altenglaner
2026-11-11 08:33:59
UTC ·
(3 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇺🇸
freehosts.eu
2026-11-11 07:55:56
UTC ·
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from QA.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generat ...
show more
Triggered Cloudflare WAF (firewallCustom) from QA.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot
🇳🇱
ItsJustStan
2026-11-11 06:05:06
UTC ·
(3 days ago)
Web app attack - scanning for vulnerabilities
Web App Attack
🇩🇪
Holger
2026-11-11 05:56:33
UTC ·
(3 days ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇳🇱
Alt255
2026-11-11 04:33:43
UTC ·
(3 days ago)
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.18.145.61 - - [11/Nov/2026:05:33:19 +0100] "GET /.git/config HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML ...
show more
[cb-16al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.18.145.61 - - [11/Nov/2026:05:33:19 +0100] "GET /.git/config HTTP/1.1" 404 1350 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-11-11 04:26:04
UTC ·
(3 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-11-11 03:40:35
UTC ·
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇵🇱
Bonn333
2026-11-11 03:37:22
UTC ·
(3 days ago)
CrowdSec: probing for exposed secrets and config files. Scenario=crowdsecurity/http-sensitive-files; events=5; window=2026-11-11T03:37:21.849514675Z .. 2026-11-11T03:37:22.540668894Z. Tried: GET /.git/config | GET /.env | GET /.env.local | GET /.env. ...
show more
CrowdSec: probing for exposed secrets and config files. Scenario=crowdsecurity/http-sensitive-files; events=5; window=2026-11-11T03:37:21.849514675Z .. 2026-11-11T03:37:22.540668894Z. Tried: GET /.git/config | GET /.env | GET /.env.local | GET /.env.staging | GET /.env.development. Automated report, no manual review.
show less
Web App Attack
Bad Web Bot
🇵🇱
Budyn
2026-11-11 02:43:13
UTC ·
(3 days ago)
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: mail.astropot.site | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWe ...
show more
[Budyn Honeypot Sinkhole] | Attack type: CRITICAL: ModSecurity WAF Exploit Block | Summary: Request triggered an emulated security trap. | Evidence: | Host: mail.astropot.site | Path: /.git/config | User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Hacking
Web App Attack
🇲🇾
Rizzy
2026-11-11 02:08:14
UTC ·
(3 days ago)
Multiple WAF Violations
Brute-Force
Web App Attack