๐ซ๐ท
GoodOldTOS
2026-10-12 08:38:23
(12 minutes ago)
Highly suspect IP
Hacking
Web App Attack
๐ฉ๐ช
igerman
2026-10-09 18:10:52
(2 days ago)
caddy probes: env-probe: GET /.env(DROP), GET /.env.backup(DROP), GET /.env.bak(DROP), GET /.env.ci( ...
show more
caddy probes: env-probe: GET /.env(DROP), GET /.env.backup(DROP), GET /.env.bak(DROP), GET /.env.ci(DROP), GET /.env.dev(DROP), GET /.env.development(DROP), GET /.env.dist(DROP), GET /.env.docker(DROP), GET /.env.example(DROP), GET /.env.live(DROP), GET /.env.local(DROP), GET /.env.old(DROP), GET /.env.preprod(DROP), GET /.env.prod(DROP), GET /.env.production(DROP), GET /.env.remote(DROP), GET /.env.sample(DROP), GET /.env.save(DROP), GET /.env.stage(DROP), GET /.env.staging(DROP), GET /.env.swp(DROP), GET /.env.test(DROP), GET /.env.uat(DROP), GET /.env~(DROP) | git-repo: GET /.git/config(DROP)
show less
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-09 02:38:56
(3 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
mnsf
2026-10-09 00:05:19
(3 days ago)
Scanning/Probing (12)
Brute-Force
Web App Attack
๐น๐ท
hostopya.com
2026-10-08 22:39:59
(3 days ago)
[plesk-apache] 6 failed attempt(s). Log: [Fri Oct 09 01:39:57.843572 2026] [authz_core:error] [pid 3 ...
show more
[plesk-apache] 6 failed attempt(s). Log: [Fri Oct 09 01:39:57.843572 2026] [authz_core:error] [pid 3185152] [client 35.212.241.12:0] AH01630: client denied by server configuration: /var/www/vhosts/lexvon.online/httpdocs/.env|[Fri Oct 09 01:39:58.073080 2026] [authz_core:error] [pid 3166707] [client 35.212.241.12:0] AH01630: client denied by server configuration: /var/www/vhosts/lexvon.online/httpdocs/.env.local|[Fri Oct 09 01:39:58.300877 2026] [authz_core:error] [pid 3154164] [client 35.212.241.12:0] AH01630: client denied by server configuration: /var/www/vhosts/lexvon.online/httpdocs/.env.production|[Fri Oct 09 01:39:58.526718 2026] [authz_core:error] [pid 3250173] [client 35.212.241.12:0] AH01630: client denied by server configuration: /var/www/vhosts/lexvon.online/httpdocs/.env.staging|[Fri Oct 09 01:39:58.753092 2026] [authz_core:error] [pid 3201144] [client 35.212.241.12:0] AH01630: client denied by server configuration: /var/www/vhosts/lexvon.online/httpdocs/.env.devel
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
homeshowdomain.nl
2026-10-08 21:59:56
(3 days ago)
Auto-ban: >3000 req/min op 2026-10-08
Web App Attack
SSH
Hacking
๐ฉ๐ช
neckaralb-admin.de
2026-10-08 16:50:28
(3 days ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 16:36:57
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 12:36:52.180686 2026] [security2:error] [pid 2484:tid 2484] [client 35.212.241.12:50976] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lewpratt.com"] [uri "/.git/config"] [unique_id "asfGpNvhnFWmjTl1dk82awAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 12:57:31
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 08:57:28.028297 2026] [security2:error] [pid 28354:tid 28354] [client 35.212.241.12:43982] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "leviwalkerportfolio.com"] [uri "/.git/config"] [unique_id "aseTOMZYtKroRnQLpbQ16QAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
paissangroup
2026-10-08 11:51:37
(3 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 11:47:21
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 35.212.241.12 (12.241.212.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 07:47:14.058281 2026] [security2:error] [pid 19341:tid 19341] [client 35.212.241.12:58780] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "levijoneslegal.com"] [uri "/.git/config"] [unique_id "aseCwmAvaGRm6qT-86AQ2AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-08 11:24:27
(3 days ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐ณ๐ฑ
MM-bot
2026-10-08 11:14:51
(3 days ago)
URL-probe: HTTP/1.1 GET request on /.git/config (2026-10-08 13:14:51 UTC+2)
Web App Attack
Hacking
Anonymous
2026-10-08 10:53:12
(3 days ago)
Bot / seems abusive / Apache connections: 63
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-10-08 10:49:58
(3 days ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack