๐ฉ๐ช
louis77
2026-10-12 16:04:20
(1 hour ago)
Sensitive file access attempt - Path: /frontend/.env, Method: GET, UA: Mozilla/5.0 AppleWebKit/537.3 ...
show more
Sensitive file access attempt - Path: /frontend/.env, Method: GET, UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-AdsBot/1.0; +https://openai.com/adsbot
show less
Web App Attack
Hacking
๐ณ๐ฑ
Alt255
2026-10-12 14:52:18
(3 hours ago)
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-01ov] Web exploit scanning: 2 suspicious requests detected by fail2ban jail <name>. Example: 34.80.113.41 - - \[12/Oct/2026:16:51:57 +0200\] "GET /media../.env HTTP/1.1" 404 7404 "-" "Mozilla/5.0 AppleWebKit/537.36 \(KHTML, like Gecko\)\; compatible\; OAI-AdsBot/1.0\; +https://openai.com/adsbot"
34.80.113.41 - - \[12/Oct/2026:16:51:57 +0200\] "GET /static//.env HTTP/1.1" 404 7404 "-" "Mozilla/5.0 \(compatible\; Qwenbot/1.0\; +https://qwen.alibaba.com/\)"
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 14:49:38
(3 hours ago)
Aggressive web scan
Web App Attack
๐จ๐ญ
zynex
2026-10-12 14:15:54
(3 hours ago)
CrowdSec crowdsecurity/http-probing
Web App Attack
๐บ๐ธ
antlac1
2026-10-12 14:04:32
(3 hours ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ธ๐ฌ
Cloudkul Cloudkul
2026-10-12 13:55:06
(4 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 13:38:06
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.80.113.41 (41.113.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.80.113.41 (41.113.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 09:37:58.833551 2026] [security2:error] [pid 32625:tid 32625] [client 34.80.113.41:47218] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "themotelwest.com"] [uri "/.htpasswd"] [unique_id "aszitjEpmaABm_b3w_ToHQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-12 13:33:51
(4 hours ago)
Fail2Ban apache-noscript
Bad Web Bot
Anonymous
2026-10-12 13:01:46
(4 hours ago)
34.80.113.41 - - [12/Oct/2026:21:01:44 +0800] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+ ...
show more
34.80.113.41 - - [12/Oct/2026:21:01:44 +0800] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 123 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)"
34.80.113.41 - - [12/Oct/2026:21:01:44 +0800] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
Stylottica
2026-10-12 12:56:52
(5 hours ago)
PrestaShop Security Module: suspicious probe path detected (/.env)
Web App Attack
Anonymous
2026-10-12 12:54:35
(5 hours ago)
34.80.113.41 - - [12/Oct/2026:14:54:16 +0200] "GET /wp-admin/.env HTTP/2.0" 403 294 "https://stylian ...
show more
34.80.113.41 - - [12/Oct/2026:14:54:16 +0200] "GET /wp-admin/.env HTTP/2.0" 403 294 "https://stylian-khw.de/wp-admin/.env" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
๐ง๐ช
madeit
2026-10-12 12:35:07
(5 hours ago)
Web App Attack
Anonymous
2026-10-12 12:20:33
(5 hours ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
๐ง๐ช
cmbplf
2026-10-12 12:07:41
(5 hours ago)
73.431 requests in 1 hour (1w6d22h)
Brute-Force
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-12 11:47:03
(6 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.80.113.41 (41.113.80.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.80.113.41 (41.113.80.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 07:46:56.599312 2026] [security2:error] [pid 8935:tid 8935] [client 34.80.113.41:56252] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||studioarmanni.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "studioarmanni.com"] [uri "/z9x8c7v6b5-debug-trigger-studioarmanni.com"] [unique_id "aszIsKrdy3HkAyHnd-7NswAAAF4"]
show less
Brute-Force
Bad Web Bot
Web App Attack