๐บ๐ธ
dot.mg
2026-10-13 20:30:30
(3 hours ago)
Scan of vulnerable files
Web App Attack
๐ฎ๐น
VHosting
2026-10-13 19:25:06
(4 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฉ๐ช
webanyone
2026-10-13 19:11:47
(4 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebK ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐ซ๐ท
thilo
2026-10-13 18:06:42
(6 hours ago)
Probe for vulnerabilities. Path attempted: /.env.local
Web App Attack
Anonymous
2026-10-13 17:50:37
(6 hours ago)
35.206.222.37 - - [13/Oct/2026:12:50:33 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macint ...
show more
35.206.222.37 - - [13/Oct/2026:12:50:33 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.69.221.52
35.206.222.37 - - [13/Oct/2026:12:50:33 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.69.221.52
35.206.222.37 - - [13/Oct/2026:12:50:34 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.69.221.52
35.206.222.37 - - [13/Oct/2026:12:50:34 -0500] "GET /.env.staging HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 172.69.221.52
35.206.222.37 - - [13/Oct/2026:12:50:34 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; In
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 15:56:16
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 11:56:12.840708 2026] [security2:error] [pid 7935:tid 7962] [client 35.206.222.37:50252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clmtic.net"] [uri "/.git/config"] [unique_id "as5UnPRBDAmVEadslXDt3QAAANg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-13 15:55:02
(8 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-13 14:19:06
(9 hours ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
NXTwoThou
2026-10-13 10:57:28
(13 hours ago)
/.env.local
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 09:34:48
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 05:34:44.137291 2026] [security2:error] [pid 17937:tid 17937] [client 35.206.222.37:33224] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "clip24.net"] [uri "/.git/config"] [unique_id "as37NGJ9Dglc2MBfLgy0aAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 06:45:04
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.206.222.37 (37.222.206.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 02:44:56.695643 2026] [security2:error] [pid 5940:tid 5940] [client 35.206.222.37:47576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cliniquecavalancia.com"] [uri "/.git/config"] [unique_id "as3TaLU8wSSZxegbUBGS5wAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
madeit
2026-10-13 05:12:57
(18 hours ago)
Web App Attack
๐ซ๐ท
masterguru
2026-10-13 04:44:34
(19 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ซ๐ท
masterguru
2026-10-13 02:50:26
(21 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
Anonymous
2026-10-13 00:22:00
(23 hours ago)
Banned by Fail2Ban on server
Web App Attack