๐ง๐ช
voormedia
2026-09-01 13:08:44
(1 day ago)
Accessed trap at '/.git/config'
Web App Attack
๐ซ๐ฎ
6kilowatti
2026-09-01 12:39:01
(1 day ago)
[01/Sep/2026:12:38:44 +0000] - - 499 - GET https wpsd.6kw.fi "/.git/config" [Client 34.95.13.220] [L ...
show more
[01/Sep/2026:12:38:44 +0000] - - 499 - GET https wpsd.6kw.fi "/.git/config" [Client 34.95.13.220] [Length 0] [Gzip -] [Sent-to 10.0.0.136] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:12:38:51 +0000] - - 499 - GET https wpsd.6kw.fi "/.env" [Client 34.95.13.220] [Length 0] [Gzip -] [Sent-to 10.0.0.136] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:12:38:56 +0000] - - 499 - GET https wpsd.6kw.fi "/.env.local" [Client 34.95.13.220] [Length 0] [Gzip -] [Sent-to 10.0.0.136] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:12:39:00 +0000] - 502 502 - GET https wpsd.6kw.fi "/.env.production" [Client 34.95.13.220] [Length 556] [Gzip -] [Sent-to 10.0.0.136] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/1
...
show less
Web App Attack
๐ณ๐ฑ
Brict IT
2026-09-01 10:08:03
(1 day ago)
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-01 09:10:42
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.95.13.220 (220.13.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.13.220 (220.13.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 05:10:35.945133 2026] [security2:error] [pid 236589:tid 236627] [client 34.95.13.220:49298] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wpe.uk.com"] [uri "/.git/config"] [unique_id "apaWi8fpSwUk1Zhun1mAdAAAAUs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ต๐ฑ
tomkolp
2026-09-01 07:49:55
(1 day ago)
CrowdSec - Scenario: crowdsecurity/http-sensitive-files. Duration: 4h.
Port Scan
Web App Attack
Anonymous
2026-09-01 07:41:44
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐จ๐ญ
dalslab ltd
2026-09-01 07:31:24
(1 day ago)
[01/Sep/2026:09:31:18 +0200] - 404 404 - GET https wpa-sec.dalslab.com "/phpinfo.php" [Client 34.95. ...
show more
[01/Sep/2026:09:31:18 +0200] - 404 404 - GET https wpa-sec.dalslab.com "/phpinfo.php" [Client 34.95.13.220] [Length 47] [Gzip -] [Sent-to 10.1.1.235] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:09:31:19 +0200] - 404 404 - GET https wpa-sec.dalslab.com "/info.php" [Client 34.95.13.220] [Length 47] [Gzip -] [Sent-to 10.1.1.235] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:09:31:20 +0200] - 404 404 - GET https wpa-sec.dalslab.com "/php.php" [Client 34.95.13.220] [Length 47] [Gzip -] [Sent-to 10.1.1.235] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[01/Sep/2026:09:31:24 +0200] - 404 404 - GET https wpa-sec.dalslab.com "/pi.php" [Client 34.95.13.220] [Length 47] [Gzip -] [Sent-to 10.1.1.235] "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-09-01 06:32:15
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
zumbo.net
2026-09-01 05:58:29
(1 day ago)
[Tue Sep 01 08:58:28.243812 2026] [proxy_fcgi:error] [pid 444468:tid 444508] [client 34.95.13.220:0] ...
show more
[Tue Sep 01 08:58:28.243812 2026] [proxy_fcgi:error] [pid 444468:tid 444508] [client 34.95.13.220:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:58:28.358087 2026] [proxy_fcgi:error] [pid 444468:tid 444496] [client 34.95.13.220:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:58:28.487237 2026] [proxy_fcgi:error] [pid 444468:tid 444478] [client 34.95.13.220:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:58:28.634023 2026] [proxy_fcgi:error] [pid 444468:tid 444499] [client 34.95.13.220:0] AH01071: Got error 'Primary script unknown'
[Tue Sep 01 08:58:28.734401 2026] [proxy_fcgi:error] [pid 444467:tid 444470] [client 34.95.13.220:0] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐บ๐ธ
masterguru
2026-09-01 05:30:07
(1 day ago)
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\ ...
show more
Remote Command Execution: Unix Shell Expression Found. Pattern match "(?:\\\\$(?:\\\\((?:\\\\(.*\\\\)|.*)\\\\)|\\\\{.*\\\\})| (932130-169)
show less
Hacking
๐บ๐ธ
Vianpyro
2026-09-01 05:14:16
(1 day ago)
Honeypot: 24 request(s) in 0 min. Paths: /, /.git/config, /.env, /.env.local, /.env.production. Meth ...
show more
Honeypot: 24 request(s) in 0 min. Paths: /, /.git/config, /.env, /.env.local, /.env.production. Method(s): GET,POST. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 396982 (Google LLC).
show less
Web App Attack
Bad Web Bot
Hacking
๐ฉ๐ช
Hazzard
2026-09-01 05:10:48
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
Anonymous
2026-09-01 02:50:07
(1 day ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
๐ณ๐ฑ
Site.eu
2026-09-01 02:15:54
(1 day ago)
Excessive multi-domain requests
Brute-Force
๐ซ๐ท
Lunix
2026-09-01 02:05:00
(1 day ago)
Brute-Force
Web App Attack