🇳🇱
e.fierstra
2026-11-04 00:27:54
UTC ·
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 23:36:23
UTC ·
(3 days ago)
[ns67.kdns.gr] httpd-config-scan: sites=kapaweb.gr; logs=/var/www/vhosts/kapaweb.gr/logs/access_ssl_log,/var/www/vhosts/system/kapaweb.gr/logs/proxy_access_ssl_log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
🇳🇱
Site.eu
2026-11-03 20:34:49
UTC ·
(3 days ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 18:11:49
UTC ·
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.182.14 (14.182.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:11:42.147957 2026] [security2:error] [pid 30192:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.182.14 (14.182.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:11:42.147957 2026] [security2:error] [pid 30192:tid 30192] [client 34.93.182.14:51570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kaplankrew.com"] [uri "/.git/config"] [unique_id "auoj3q2tU4Gt9gvqJ1Z3kQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-11-03 12:10:08
UTC ·
(4 days ago)
IP matched detection query 50 and more bad rqs apache.
Hacking
Bad Web Bot
Brute-Force
Web App Attack
🇵🇱
Budyn
2026-11-03 07:06:27
UTC ·
(4 days ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: login.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintos ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: login.definitelynotahoneypot.online | Path: /.git/config | User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇵🇱
Budyn
2026-11-03 05:05:41
UTC ·
(4 days ago)
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: login.budyn.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) ...
show more
[Budyn Honeypot Sinkhole] | Attack type: Enterprise & Framework Recon Scanner | Summary: Web scanner triggered an emulated security trap. | Evidence: | Host: login.budyn.top | Path: /.git/config | User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 | Request: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
🇩🇪
Bedios GmbH
2026-11-03 01:29:44
UTC ·
(4 days ago)
Scanning for exposed credentials and private keys.
Hacking
Anonymous
2026-11-03 00:49:29
UTC ·
(4 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇩🇪
konseptit
2026-11-02 23:06:40
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.93.182.14 (IN/India/14.182.93.34.bc.googleusercontent.com)
SQL Injection
🇷🇺
OK
2026-11-02 21:28:04
UTC ·
(4 days ago)
HTTP/HTTPS
Hacking
Web App Attack
🇧🇬
Ilcheff
2026-11-02 20:59:20
UTC ·
(4 days ago)
CrowdSec: crowdsecurity/http-sensitive-files (5 events)
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-02 18:09:00
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.93.182.14 (14.182.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:08:53.153446 2026] [security2:error] [pid 11501:tid 11 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.93.182.14 (14.182.93.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 13:08:53.153446 2026] [security2:error] [pid 11501:tid 11501] [client 34.93.182.14:33444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kochcreative.com"] [uri "/.git/config"] [unique_id "aujRtSySGnlfqP4UHiKS_QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
helios.live
2026-11-02 14:22:55
UTC ·
(4 days ago)
2026/11/02 14:22:52 [error] 2030896#2030896: *1236381 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:22:53 [error] 2030896#2030896: *1236379 access forbid ...
show more
2026/11/02 14:22:52 [error] 2030896#2030896: *1236381 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.git/config HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:22:53 [error] 2030896#2030896: *1236379 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.env HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:22:54 [error] 2030896#2030896: *1236379 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.env.local HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:22:54 [error] 2030896#2030896: *1236379 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.env.production HTTP/1.1", host: "kocervpn.com"
2026/11/02 14:22:54 [error] 2030896#2030896: *1236379 access forbidden by rule, client: 34.93.182.14, server: kocervpn.com, request: "GET /.env.staging HTTP/1.1", host: "kocervpn.com"
...
show less
Web App Attack
🇮🇹
VHosting
2026-11-02 12:30:04
UTC ·
(5 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack