🇩🇪
Bedios GmbH
2026-10-27 16:58:40
(3 hours ago)
Scanning for exposed credentials and private keys
Hacking
🇺🇸
Victor López
2026-10-27 16:42:50
(4 hours ago)
new.artstudioutopia.com 34.48.209.10 - - [27/Oct/2026:11:42:49 -0500] "GET / HTTP/1.1" 444 0 "-" "Mo ...
show more
new.artstudioutopia.com 34.48.209.10 - - [27/Oct/2026:11:42:49 -0500] "GET / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -
new.artstudioutopia.com 34.48.209.10 - - [27/Oct/2026:11:42:49 -0500] "POST / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -
new.artstudioutopia.com 34.48.209.10 - - [27/Oct/2026:11:42:49 -0500] "POST / HTTP/1.1" 444 0 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" -
...
show less
Hacking
Web App Attack
🇫🇷
dwmp
2026-10-27 15:53:50
(4 hours ago)
[27/Oct/2026:16:53:45.622162 +0100] auDJCYXrMrIZdNgvVQraVwAAABc 34.48.209.10 56192 38.242.227.117 70 ...
show more
[27/Oct/2026:16:53:45.622162 +0100] auDJCYXrMrIZdNgvVQraVwAAABc 34.48.209.10 56192 38.242.227.117 7081
[27/Oct/2026:16:53:49.610284 +0100] auDJDYXrMrIZdNgvVQraWwAAAAE 34.48.209.10 56236 38.242.227.117 7081
[27/Oct/2026:16:53:49.841186 +0100] auDJDYXrMrIZdNgvVQraXAAAABY 34.48.209.10 56256 38.242.227.117 7081
...
show less
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-10-27 13:55:45
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.209.10 (10.209.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.209.10 (10.209.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 09:55:41.627694 2026] [security2:error] [pid 17250:tid 17250] [client 34.48.209.10:53450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "new-site.cathybermanmft.com"] [uri "/.git/config"] [unique_id "auCtXT6E7Hdbjj9DIl2ujwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
netstat scsh-cdn reporter
2026-10-27 07:20:00
(13 hours ago)
date: 26.10.2026, time: 21:12 (UTC+3), host: netstat.scsh-cdn.net, port: 443 (100.00%), method: GET ...
show more
date: 26.10.2026, time: 21:12 (UTC+3), host: netstat.scsh-cdn.net, port: 443 (100.00%), method: GET (98.53%); POST (1.47%), status_code: 404 (99.27%); 200 (0.73%), connection_count: 273, user_agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36", comment: 99.27% HTTP 4xx responses; AbuseIPDB candidate categories: 21; suspicious paths: /.git/config, /.env.local, /.env.production, /.env.staging, /.env.development
show less
Web App Attack
🇳🇱
e.fierstra
2026-10-27 06:43:41
(13 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
2026-10-27 06:38:03
(14 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.remote HTTP/1.1, GET / ...
show more
Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.test HTTP/1.1
show less
Hacking
Web App Attack
2026-10-27 03:30:14
(17 hours ago)
fail2ban jail apache-secrets-probe: 34.48.209.10 - - [26/Oct/2026:20:30:13 -0700] "GET /.git/config ...
show more
fail2ban jail apache-secrets-probe: 34.48.209.10 - - [26/Oct/2026:20:30:13 -0700] "GET /.git/config HTTP/1.1" 403 514 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
🇳🇱
Site.eu
2026-10-27 03:08:47
(17 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
WellSpring
2026-10-27 01:54:48
(18 hours ago)
git exposure on naturologie.com/.git/config — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇩🇪
ger-stg-sifi1
2026-10-26 23:31:02
(21 hours ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
datajt
2026-10-26 22:50:40
(21 hours ago)
Web vulnerability probing (CrowdSec scenario crowdsecurity/http-probing).
Web App Attack
🇩🇪
marten_o
2026-10-26 22:33:24
(22 hours ago)
34.48.209.10 - - [26/Oct/2026:23:33:23 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 ...
show more
34.48.209.10 - - [26/Oct/2026:23:33:23 +0100] "GET /tmp/phpinfo.php HTTP/1.1" 301 - "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 317 381
...
show less
Web App Attack
🇨🇭
zynex
2026-10-26 22:30:07
(22 hours ago)
URL Probing: /server/.env
Web App Attack
🇩🇪
FD-IX
2026-10-26 22:14:16
(22 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack