π«π·
masterguru
2026-10-17 06:17:30
(1 hour ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
π§πͺ
taivas.nl
2026-10-17 04:33:10
(2 hours ago)
Many_bad_calls
Web App Attack
π§πͺ
taivas.nl
2026-10-17 03:02:09
(4 hours ago)
Bad_requests
Bad Web Bot
π©πͺ
altenglaner
2026-10-17 01:49:39
(5 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-17 00:08:56
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 20:08:48.163110 2026] [security2:error] [pid 10028:tid 10028] [client 34.39.155.81:33206] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "plantmedicinerocks.shannonmatter.com"] [uri "/.git/config"] [unique_id "atK8kCztHFtPjaJ4oBNilAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¬π§
consul.to
2026-10-16 22:09:52
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
π§πͺ
cmbplf
2026-10-16 19:32:17
(11 hours ago)
7.302 requests with url.path *.env
880 requests with url.path *phpinfo.php
202 requests with url. ...
show more
7.302 requests with url.path *.env
880 requests with url.path *phpinfo.php
202 requests with url.path *credentials.json
show less
Brute-Force
Bad Web Bot
Anonymous
2026-10-16 17:25:02
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /.env.development HTTP/1.1, GET ...
show more
Bot / scanning and/or hacking attempts: GET /.env.bak HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.swp HTTP/1.1, GET /.env.preprod HTTP/1.1, GET /.env.dist HTTP/1.1, GET /.env.uat HTTP/1.1, GET /.env.prod HTTP/1.1, GET /.env~ HTTP/1.1, GET /.env.docker HTTP/1.1, GET /.env.ci HTTP/1.1, GET /.env.stage HTTP/1.1, GET /.env.live HTTP/1.1, GET /.env.dev HTTP/1.1
show less
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 16:51:39
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 12:51:32.267310 2026] [security2:error] [pid 406:tid 439] [client 34.39.155.81:47412] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "planmytrust.com"] [uri "/.git/config"] [unique_id "atJWFMgn8YyuFSDbOsTxQAAAAUw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¦πΉ
SchiWaGoA
2026-10-16 16:13:29
(15 hours ago)
fail2ban npm-scanner: Web vulnerability scanning (probing for .env, .git, phpinfo and similar files)
Web App Attack
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-16 15:38:58
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 11:38:51.259281 2026] [security2:error] [pid 32083:tid 32092] [client 34.39.155.81:33812] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "planillas.net"] [uri "/.git/config"] [unique_id "atJFC5vW4Bro3nGQgb9T1gAAAQY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΈπͺ
vaia.cloud
2026-10-16 15:10:01
(16 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-16 13:38:16
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.39.155.81 (81.155.39.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 16 09:38:06.003907 2026] [security2:error] [pid 4379:tid 4379] [client 34.39.155.81:50676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "planetezfind.com"] [uri "/.git/config"] [unique_id "atIovskQW8yT-ws77AUvcgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
Marco711
2026-10-16 13:13:03
(18 hours ago)
port/URL scanning
Port Scan
Web App Attack
π©πͺ
Savvii
2026-10-16 10:52:37
(20 hours ago)
20 attempts against mh-misbehave-ban on plane
Brute-Force
Bad Web Bot
Web App Attack