🇩🇪
BlueWire Hosting
2026-08-31 07:07:18
(10 minutes ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 07:05:02
(12 minutes ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇫🇷
Octopuce
2026-08-31 06:47:41
(30 minutes ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 06:04:08
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.35.32.203 (203.32.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.32.203 (203.32.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 02:04:02.790874 2026] [security2:error] [pid 12292:tid 12292] [client 34.35.32.203:52780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marianozaro.com"] [uri "/.git/config"] [unique_id "apUZUg0mvzTp-MuBRyytfwAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-08-31 05:56:45
(1 hour ago)
Scanning for web/db/file exploits on www.mariannedriessen.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:16:32
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.35.32.203 (203.32.35.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.32.203 (203.32.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:16:26.050541 2026] [security2:error] [pid 9166:tid 9166] [client 34.35.32.203:41556] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mariakhalitov.com"] [uri "/.git/config"] [unique_id "apUOKiip0HQ5cSG7RJanxQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-31 04:37:15
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇫🇷
masterguru
2026-08-31 04:22:07
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇵🇱
Budyn
2026-08-30 11:31:25
(19 hours ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: idp.astropot.online | URI: /.git/config | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
0x44
2026-08-30 10:06:30
(21 hours ago)
Abusive host detected - Attempt to access sensitive files
Web App Attack
Hacking
2026-08-30 08:00:03
(23 hours ago)
suspicious request in access.log
Web App Attack
2026-08-30 07:02:49
(1 day ago)
2026/08/30 07:02:47 [error] 2115100#2115100: *98195 [client 34.35.32.203] ModSecurity: Access denied ...
show more
2026/08/30 07:02:47 [error] 2115100#2115100: *98195 [client 34.35.32.203] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `50' ) [file "/usr/local/owasp-modsecurity-crs-4.11.0/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "222"] [id "949110"] [rev ""] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [data ""] [severity "0"] [ver "OWASP_CRS/4.29.0"] [maturity "0"] [accuracy "0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "idealcollegeonline.org"] [uri "/"] [unique_id "178807336742.136433"] [ref ""], client: 34.35.32.203, server: idealcollegeonline.org, request: "POST / HTTP/1.1", host: "idealcollegeonline.org"
2026/08/30 07:02:47 [error] 2115100#2115100: *98195 [client 34.35.32.203] ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `Ge' with parameter `5' against variable `TX:BLOCKING_INBOUND_ANOMALY_SCORE' (Value: `50' ) [file "/usr/local/owa
...
show less
Brute-Force
🇮🇹
VHosting
2026-08-30 06:55:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇩🇪
dom4k
2026-08-30 06:46:32
(1 day ago)
34.35.32.203 - - [30/Aug/2026:06:46:31 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Wi ...
show more
34.35.32.203 - - [30/Aug/2026:06:46:31 +0000] "GET /.git/config HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web Spam
Bad Web Bot
Web App Attack