๐ฆ๐บ
Klaverstyn
2026-10-16 23:41:45
(6 hours ago)
Persistent attacker, repeat offender
Hacking
๐ซ๐ฎ
Vaino Karppi
2026-10-16 19:58:57
(10 hours ago)
Honeypot triggered: Tried to access restricted page /admin/.env
Hacking
๐ณ๐ฑ
Site.eu
2026-10-16 17:45:54
(12 hours ago)
Excessive 404/403 errors
Brute-Force
๐ง๐ช
cmbplf
2026-10-16 16:36:47
(13 hours ago)
709 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-10-16 16:36:44
(13 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 13:19:14
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.217.211 (211.217.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.217.211 (211.217.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:19:08.063596 2026] [security2:error] [pid 24394:tid 24394] [client 34.19.217.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lumecircadian.com"] [uri "/.git/config"] [unique_id "atIkTKGvcFyGLdc9f_J_aAAAACw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-10-16 13:09:01
(17 hours ago)
2026-10-16 15:07:21 GET /.git/config [301] && 2026-10-16 15:07:21 GET /.git/config [301] && 2026-10- ...
show more
2026-10-16 15:07:21 GET /.git/config [301] && 2026-10-16 15:07:21 GET /.git/config [301] && 2026-10-16 15:07:21 GET /.env [301] && 446 more within 20 minutes
show less
Web App Attack
๐บ๐ธ
fazar
2026-10-16 13:01:14
(17 hours ago)
crowdsecurity/http-probing on node: us01
Web App Attack
Hacking
๐ฉ๐ช
Manuel Braeuer
2026-10-16 12:37:54
(17 hours ago)
34.19.217.211 - - [16/Oct/2026:14:37:46 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macin ...
show more
34.19.217.211 - - [16/Oct/2026:14:37:46 +0200] "GET /.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.217.211 - - [16/Oct/2026:14:37:52 +0200] "GET /src/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.217.211 - - [16/Oct/2026:14:37:52 +0200] "GET /config/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.217.211 - - [16/Oct/2026:14:37:53 +0200] "GET /database/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.19.217.211 - - [16/Oct/2026:14:37:53 +0200] "GET /storage/.env HTTP/1.1" 403 6275 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-16 10:15:01
(20 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
Lee Daniel
2026-10-16 08:18:36
(22 hours ago)
34.19.217.211 - - [16/Oct/2026:04:18:35 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Window ...
show more
34.19.217.211 - - [16/Oct/2026:04:18:35 -0400] "GET /.env HTTP/1.1" 403 344 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-16 07:26:45
(22 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
Anonymous
2026-10-16 07:00:01
(23 hours ago)
suspicious request in access.log
Web App Attack
๐ซ๐ท
masterguru
2026-10-16 06:00:20
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-16 05:57:50
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.19.217.211 (211.217.19.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.217.211 (211.217.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 01:57:45.301199 2026] [security2:error] [pid 20549:tid 20549] [client 34.19.217.211:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "luisgtechgroup.com"] [uri "/.git/config"] [unique_id "atG82Qpt_Mzd0bTvRRnDkwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack