๐ฉ๐ช
XICTRON
2026-10-22 11:50:05
(7 hours ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-22 11:11:22
(8 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
EGP Abuse Dept
2026-10-22 10:56:18
(8 hours ago)
Scanning for web/db/file exploits on optiekbyalain.nl
SQL Injection
Bad Web Bot
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-10-22 09:26:02
(10 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-10-22 08:58:05
(10 hours ago)
34.32.126.8 - - [22/Oct/2026:08:58:04 +0000] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Lin ...
show more
34.32.126.8 - - [22/Oct/2026:08:58:04 +0000] "GET /.env HTTP/1.1" 404 555 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" "opt-out.schmittel-it.de"
...
show less
Hacking
Bad Web Bot
Web App Attack
๐บ๐ธ
iwle
2026-10-22 08:49:52
(10 hours ago)
[Thu Oct 22 04:49:50.558584 2026] [:error] [pid 1600:tid 1722] [client 34.32.126.8:42668] [client 34 ...
show more
[Thu Oct 22 04:49:50.558584 2026] [:error] [pid 1600:tid 1722] [client 34.32.126.8:42668] [client 34.32.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\\\.[^/]*)?|\\\\.git(?:/|$)|phpinfo(?:\\\\.php)?(?:\\\\.(?:bak|old|save|tmp|swp|~))?|php-info\\\\.php|phpversion\\\\.php|info\\\\.php|debug\\\\.php|pinfo\\\\.php|pi\\\\.php|php\\\\.php|i\\\\.php|application_default_credentials\\\\.json|(?:firebase|google ..." at REQUEST_FILENAME. [file "/etc/httpd/modsecurity.d/local_rules/100-site-policy.conf"] [line "146"] [id "100113"] [msg "Local Policy: Sensitive file or diagnostic endpoint probe"] [severity "WARNING"] [tag "local/sensitive-file-probe"] [hostname "main.justuptowngames.com"] [uri "/.env"] [unique_id "atnOLouCq8fMgNU9XqwZqAAAAIQ"]
[Thu Oct 22 04:49:51.037090 2026] [:error] [pid 1598:tid 1695] [client 34.32.126.8:42674] [client 34.32.126.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "(?i)(?:^|/)(?:\\\\.env(?:\\
...
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
Dominik Lysiak
2026-10-22 08:19:59
(11 hours ago)
34.32.126.8 - - [22/Oct/2026:10:19:58 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (M ...
show more
34.32.126.8 - - [22/Oct/2026:10:19:58 +0200] "GET /.git/config HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.126.8 - - [22/Oct/2026:10:19:58 +0200] "GET /.env HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.126.8 - - [22/Oct/2026:10:19:59 +0200] "GET /.env.local HTTP/1.1" 404 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-22 07:47:42
(11 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-10-22 07:20:28
(12 hours ago)
Webpage scraping
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
sfmet-admin
2026-10-22 07:02:53
(12 hours ago)
34.32.126.8 - - [22/Oct/2026:07:02:53 +0000] "GET /.git/config HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Mac ...
show more
34.32.126.8 - - [22/Oct/2026:07:02:53 +0000] "GET /.git/config HTTP/2.0" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
๐บ๐ธ
infra-monitor
2026-10-22 06:00:05
(13 hours ago)
Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-probing, crowdsecurity/http-se ...
show more
Automated ban via infra-monitor: suspicious-probe, crowdsecurity/http-probing, crowdsecurity/http-sensitive-files
show less
Port Scan
Web App Attack
๐ฉ๐ช
wpadm4
2026-10-22 05:28:48
(14 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
MBombeck
2026-10-22 04:53:47
(14 hours ago)
Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-22 03:10:24
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.126.8 (8.126.32.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.126.8 (8.126.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 23:10:17.089700 2026] [security2:error] [pid 27544:tid 27544] [client 34.32.126.8:57268] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oposicionesyconcursos.es"] [uri "/.git/config"] [unique_id "atl-mdZHlMm4k57uOkSgIAAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-22 03:09:55
(16 hours ago)
34.32.126.8 - - [22/Oct/2026:03:08:53 +0000] "POST / HTTP/1.1" 403 25626 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.32.126.8 - - [22/Oct/2026:03:08:53 +0000] "POST / HTTP/1.1" 403 25626 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.126.8"
34.32.126.8 - - [22/Oct/2026:03:08:53 +0000] "POST / HTTP/1.1" 403 25626 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.126.8"
34.32.126.8 - - [22/Oct/2026:03:08:53 +0000] "GET /.git/config HTTP/1.1" 403 24768 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.126.8"
34.32.126.8 - - [22/Oct/2026:03:08:55 +0000] "GET /.env HTTP/1.1" 403 24768 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.32.126.8"
34.32.126.8 - - [22/Oct/2026:03:08:55 +0000] "GET /.env.local HTTP/1.1" 403 24768 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
...
show less
Web App Attack