๐ธ๐ช
vaia.cloud
2026-10-22 10:50:03
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-22 10:09:14
(1 day ago)
34.81.189.136 - - [22/Oct/2026:10:08:42 +0000] "GET /.env HTTP/1.1" 403 44651 "-" "Mozilla/5.0 (Wind ...
show more
34.81.189.136 - - [22/Oct/2026:10:08:42 +0000] "GET /.env HTTP/1.1" 403 44651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.81.189.136 - - [22/Oct/2026:10:08:44 +0000] "GET /.env.local HTTP/1.1" 403 44513 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.81.189.136 - - [22/Oct/2026:10:08:46 +0000] "GET /.env.production HTTP/1.1" 403 44651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.81.189.136 - - [22/Oct/2026:10:08:49 +0000] "GET /.env.staging HTTP/1.1" 403 44651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
34.81.189.136 - - [22/Oct/2026:10:08:52 +0000] "GET /.env.development HTTP/1.1" 403 44651 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Web App Attack
๐ซ๐ฎ
sibahota
2026-10-22 08:59:18
(1 day ago)
34.81.189.136 - - [22/Oct/2026:08:59:08 +0000] stockworld.co "GET /phpinfo.php HTTP/1.1" 404 1134 0. ...
show more
34.81.189.136 - - [22/Oct/2026:08:59:08 +0000] stockworld.co "GET /phpinfo.php HTTP/1.1" 404 1134 0.001 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.002 "http://stockworld.co/phpinfo.php"
34.81.189.136 - - [22/Oct/2026:08:59:08 +0000] stockworld.co "GET /info.php HTTP/1.1" 404 1134 0.003 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.002 "http://stockworld.co/info.php"
34.81.189.136 - - [22/Oct/2026:08:59:09 +0000] stockworld.co "GET /php.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.17.0.1:8003 404 0.002 "http://stockworld.co/php.php"
34.81.189.136 - - [22/Oct/2026:08:59:09 +0000] stockworld.co "GET /i.php HTTP/1.1" 404 1134 0.002 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15
...
show less
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-22 08:37:44
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
Hary74656
2026-10-22 07:41:05
(1 day ago)
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
t TX:blo ...
show more
Fail2Ban on schani.hostmi.at: jail=apache-modsecurity, failures=3.
[earlier text truncated]
t TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/"] [unique_id "atm-EDqMH7SOJpU0VR0KuwAAAFg"]
[Thu Oct 22 09:41:04.926025 2026] [vhost aschi.at] [security2:error] [pid 1248:tid 140631959647936] [client 34.81.189.136:55068] [realclient 34.81.189.136:55068] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/opt/owasp-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 35)"] [ver "OWASP_CRS/4.30.0"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "weavernet.at"] [uri "/"] [unique_id "atm-EDqMH7SOJpU0VR0KvAAAAFY"]
show less
Web App Attack
๐ฌ๐ง
Comberton
2026-10-22 06:39:29
(1 day ago)
Ban via F2B wordfence
Brute-Force
Web App Attack
๐ซ๐ท
masterguru
2026-10-22 04:00:04
(1 day ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
๐ฉ๐ช
todix
2026-10-20 17:31:10
(2 days ago)
"GET /.git/config HTTP/1.1" 403 6505 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
"GET /.git/config HTTP/1.1" 403 6505 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ง๐ท
radardatelecom
2026-10-20 14:18:04
(2 days ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐ฉ๐ช
altenglaner
2026-10-20 13:57:06
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
Anonymous
2026-10-20 11:54:29
(3 days ago)
Aggressive web scan
Web App Attack
๐ฉ๐ช
todix
2026-10-20 11:48:21
(3 days ago)
"GET /.git/config HTTP/1.1" 403 6505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKi ...
show more
"GET /.git/config HTTP/1.1" 403 6505 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
๐ฉ๐ช
marten_o
2026-10-20 11:38:34
(3 days ago)
34.81.189.136 - - [20/Oct/2026:13:38:34 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/ ...
show more
34.81.189.136 - - [20/Oct/2026:13:38:34 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 236 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 313 458
...
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 08:38:51
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
ghostwarriors
2026-10-19 08:50:09
(4 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack