2026-09-18 00:39:47
(13 hours ago)
45.3.39.199 46.39.185.24 - [18/Sep/2026:02:39:45 +0200] "GET /.env HTTP/1.1" 404 158 "-" "Mozilla/5. ...
show more
45.3.39.199 46.39.185.24 - [18/Sep/2026:02:39:45 +0200] "GET /.env HTTP/1.1" 404 158 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36"
...
show less
Hacking
Web App Attack
🇩🇪
stinpriza
2026-09-17 22:22:11
(15 hours ago)
Web App Attack
Web App Attack
🇫🇷
Thaliruth
2026-09-12 17:32:58
(5 days ago)
[12/Sep/2026:19:32:58.473793 +0200] aqWMyvS2PHij3eGqONMHnAAAAFQ 45.3.39.199 57432 127.0.0.1 7080
...
Hacking
🇨🇿
Countryman
2026-09-04 00:10:01
(2 weeks ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇫🇷
Sklurk
2026-08-04 01:23:48
(1 month ago)
Web App Attack
Web App Attack
🇩🇪
LRob
2026-06-23 22:30:30
(2 months ago)
Repeated requests on blocked xmlrpc.php, blocked by fail2ban in custom-503-xmlrpc jail
Bad Web Bot
Web App Attack
🇪🇸
librebit
2026-06-16 08:05:29
(3 months ago)
Brute force
Brute-Force
🇲🇳
Public CSIRT/CC of Mongolia
2026-06-15 04:51:25
(3 months ago)
Honeypot hit: HTTP/1.1 request on 1881
HEAD /
Accept: */*; 1881 [1] TCP
Web App Attack
🇺🇸
mnsf
2026-02-20 02:05:24
(6 months ago)
Scanning/Probing (23)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 05:28:11
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Feb 19 00:28:05.268304 2026] [security2:error] [pid 12022:tid 12022] [client 45.3.39.199:21001] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "krystalsgiftshopandboutique.net"] [uri "/.env"] [unique_id "aZafZUxZTX7wKP80rEsefQAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 04:54:57
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 23:54:53.845483 2026] [security2:error] [pid 10718:tid 10718] [client 45.3.39.199:61867] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "konstantiasofokleous.com"] [uri "/.env.staging"] [unique_id "aZaXnWpi9CEKLO6Oex_ghAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 03:13:56
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 22:13:50.089695 2026] [security2:error] [pid 6651:tid 6653] [client 45.3.39.199:52111] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kettlehill.net"] [uri "/test/.git/config"] [unique_id "aZZ_7s9-numDMILcxkPi4gAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-02-19 02:55:32
(6 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.39.199 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Feb 18 21:55:28.198068 2026] [security2:error] [pid 3745:tid 3745] [client 45.3.39.199:41037] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/.env"] [unique_id "aZZ7oM_2RQif3mUxqyJbTAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-02-19 01:05:25
(6 months ago)
Scanning/Probing (24)
Brute-Force
Web App Attack
2026-02-19 00:56:02
(6 months ago)
Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /config/.env HTTP/1.1, GET /ba ...
show more
Bot / scanning and/or hacking attempts: GET /.env.local HTTP/1.1, GET /config/.env HTTP/1.1, GET /backend/.env HTTP/1.1, GET /.git/config HTTP/1.1, GET /admin/.git/config HTTP/1.1, GET /dev/.git/config HTTP/1.1, GET /frontend/.env HTTP/1.1
show less
Hacking
Web App Attack