2026-10-25 12:02:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.development HTTP/1.1, ...
show more
Bot / scanning and/or hacking attempts: GET /.env.staging HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.sample HTTP/1.1, GET /.env.test HTTP/1.1, GET /.git/config HTTP/1.1, GET /.env.production HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.local HTTP/1.1, POST / HTTP/1.1, GET /.env.old HTTP/1.1, GET /.env HTTP/1.1, GET /.env.remote HTTP/1.1, GET /.env.save HTTP/1.1
show less
Hacking
Web App Attack
2026-10-25 11:07:02
(1 day ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-10-25 10:52:04.
Web App Attack
🇬🇧
AvonleaConsulting
2026-10-25 08:16:16
(1 day ago)
Scanning unused Default website or suspicious access to valid sites from IP marked as abusive
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-10-25 05:10:39
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
sternwart
2026-10-25 04:58:48
(1 day ago)
Automatisch erkannt: Zugriff auf /.git/config (raccoon-lounge.ch)
Web App Attack
Bad Web Bot
🇦🇺
A.i.D.A.N.N
2026-10-25 04:26:39
(1 day ago)
A.i.D.A.N.N: Anomaly Detected - Signature match Web Service - Web application attack detected
Web App Attack
🇩🇪
langenkamp-media
2026-10-25 04:23:36
(1 day ago)
Fail2Ban: Banned from jail nginx-scan-critical on 3dausdu.de
Web App Attack
🇩🇪
zumbo.net
2026-10-25 01:29:34
(2 days ago)
[Sun Oct 25 04:29:32.823075 2026] [proxy_fcgi:error] [pid 357593:tid 357638] [client 34.50.116.119:0 ...
show more
[Sun Oct 25 04:29:32.823075 2026] [proxy_fcgi:error] [pid 357593:tid 357638] [client 34.50.116.119:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 25 04:29:33.064551 2026] [proxy_fcgi:error] [pid 357591:tid 357648] [client 34.50.116.119:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 25 04:29:33.272823 2026] [proxy_fcgi:error] [pid 357591:tid 357597] [client 34.50.116.119:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 25 04:29:33.481988 2026] [proxy_fcgi:error] [pid 357591:tid 357598] [client 34.50.116.119:0] AH01071: Got error 'Primary script unknown'
[Sun Oct 25 04:29:33.676621 2026] [proxy_fcgi:error] [pid 357593:tid 357633] [client 34.50.116.119:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
🇧🇪
cmbplf
2026-10-25 00:40:44
(2 days ago)
1.491 requests with url.path *.env
Brute-Force
Bad Web Bot
🇩🇪
EGP Abuse Dept
2026-10-25 00:22:45
(2 days ago)
Scanning for web/db/file exploits on raakvlak.com
SQL Injection
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-25 00:02:22
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-10-23 20:54:51
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.116.119 (119.116.50.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.116.119 (119.116.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 23 16:54:43.610792 2026] [security2:error] [pid 12847:tid 12858] [client 34.50.116.119:44770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "scribblism.com"] [uri "/.git/config"] [unique_id "atvJkyYxFIoxONQl0vDa5QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
kp_5036
2026-10-23 20:37:07
(3 days ago)
Cloudflare WAF 2026-10-23 19:32 - 2026-10-23 20:37 UTC, 233 requests: probed /prestashop/.env, /, /i ...
show more
Cloudflare WAF 2026-10-23 19:32 - 2026-10-23 20:37 UTC, 233 requests: probed /prestashop/.env, /, /internal/.env, /.env.prod, /.env.development, /.env.json, /administrator/.env, /psnlink/.env; WAF blocked Information Disclosure - Common Files, Information Disclosure - File Extension, Code Injection - CVE:CVE-2022-29078, React - RCE - CVE:CVE-2025-55182 | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
show less
Hacking
Web App Attack
🇳🇱
Alt255
2026-10-23 19:49:21
(3 days ago)
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-27al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.50.116.119 - - [23/Oct/2026:21:49:09 +0200] "GET /.git/config HTTP/1.1" 404 1987 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇵🇱
sefinek.net
2026-10-23 19:44:15
(3 days ago)
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoi ...
show more
Triggered Cloudflare WAF (firewallCustom) from ID.
Action: BLOCK | Protocol: HTTP/1.1 (GET) | Endpoint: /firebase-key.json | UA: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 • Generated by: github.com/sefinek/Cloudflare-WAF-To-AbuseIPDB
show less
Bad Web Bot