Anonymous
2026-10-20 11:59:31
(1 hour ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-10-20 11:00:03
(2 hours ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 10:33:00
(2 hours ago)
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[ti-01al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.7.246.253 - - [20/Oct/2026:12:32:54 +0200] "GET /.git/config HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.246.253 - - [20/Oct/2026:12:32:54 +0200] "GET /.env HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.246.253 - - [20/Oct/2026:12:32:54 +0200] "GET /.env.local HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.7.246.253 - - [20/Oct/2026:12:32:54 +0200] "GET /.env.production HTTP/1.1" 404 2104 "-" "Mozilla/5.0 (Windows NT 10.0;
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
ams_sec_user
2026-10-20 08:59:59
(4 hours ago)
Automated requests against a hosted website: 226 requests between 08:00 and 08:59 UTC; 209 probes fo ...
show more
Automated requests against a hosted website: 226 requests between 08:00 and 08:59 UTC; 209 probes for exposed secrets/config files (/phpinfo, /_profiler/phpinfo, /.git/config). Reported automatically.
show less
Hacking
Bad Web Bot
Web App Attack
๐ฏ๐ต
ZEROVOX
2026-10-20 07:49:23
(5 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files detected
Web App Attack
๐ซ๐ท
masterguru
2026-10-19 23:03:33
(14 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
Anonymous
2026-10-19 10:22:58
(1 day ago)
Web application attack detected.
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 10:22:42
(1 day ago)
[cb-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-14al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.7.246.253 - - [19/Oct/2026:12:22:39 +0200] "GET /.env.txt HTTP/1.0" 404 89235 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
paulshipley.com.au
2026-10-19 05:15:10
(1 day ago)
[Mon Oct 19 16:15:08.954741 2026] [security2:error] [pid 77362] [client 34.7.246.253:35044] [client ...
show more
[Mon Oct 19 16:15:08.954741 2026] [security2:error] [pid 77362] [client 34.7.246.253:35044] [client 34.7.246.253] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/modsecurity/crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "shop.levellapromotions.co.nz"] [uri "/"] [unique_id "atWnXFxZLS4EwJJaDdRXdQAAAAI"]
...
show less
Web App Attack
Anonymous
2026-10-19 03:47:02
(1 day ago)
34.7.246.253 - - [19/Oct/2026:11:47:01 +0800] "GET /.git/config HTTP/1.1" 404 30445 "-" "Mozilla/5.0 ...
show more
34.7.246.253 - - [19/Oct/2026:11:47:01 +0800] "GET /.git/config HTTP/1.1" 404 30445 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-10-19 03:28:00
(1 day ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐จ๐ญ
zynex
2026-10-19 03:09:52
(1 day ago)
URL Probing: /admin/.env
Web App Attack
Anonymous
2026-10-19 02:37:37
(1 day ago)
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, Bad ...
show more
Flagged as abuse by IisGuard automated detection (tier L3, score 65/100). Reasons: Reputation=1, BadPath=23,9, Rate=20, Diversity=19,8.
show less
Web App Attack
DDoS Attack
Bad Web Bot
๐ฉ๐ช
Philister11
2026-10-19 02:11:13
(1 day ago)
CrowdSec: crowdsecurity/http-crawl-non_statics (NL/AS396982)
Bad Web Bot
Web App Attack
๐ต๐ฑ
Budyn
2026-10-19 01:51:39
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: shop.goblinpot.online | URI: /.git/config | UA: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack