๐ซ๐ท
Sklurk
2026-07-30 01:16:37
(2 days ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-07-29 00:45:39
(3 days ago)
Web App Attack
Web App Attack
๐ซ๐ท
Sklurk
2026-07-25 12:00:42
(6 days ago)
Web App Attack
Web App Attack
๐ซ๐ฎ
inlink.ltd
2026-07-04 08:33:41
(3 weeks ago)
Known malicious PHP file or CMS probe
Web App Attack
๐ซ๐ท
Sklurk
2026-06-23 03:57:00
(1 month ago)
Web App Attack
Web App Attack
๐ช๐ธ
librebit
2026-05-17 04:37:47
(2 months ago)
Brute force
Brute-Force
๐ฌ๐ง
openstrike.co.uk
2026-02-16 06:13:19
(5 months ago)
12 attacks on VC URLs, password grabbing URLs, env grabbing URLs:
GET /api/.git/config HTTP/1.1
GET ...
show more
12 attacks on VC URLs, password grabbing URLs, env grabbing URLs:
GET /api/.git/config HTTP/1.1
GET /.aws/credentials HTTP/1.1
GET /config/.env HTTP/1.1
show less
Hacking
๐ณ๐ฑ
jjnxpct
2026-02-16 04:54:23
(5 months ago)
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting UR ...
show more
Automated security incident from hosting server. ModSecurity blocked suspicious request targeting URI: /app/.git/config (Rule ID: 930130) - Restricted File Access Attempt
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-15 12:39:07
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:39:03.912761 2026] [security2:error] [pid 31772:tid 31772] [client 45.3.51.69:49787] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "shafoo.com"] [uri "/.env.local"] [unique_id "aZG-ZyyiTon4kkSmBBUV4AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-15 12:05:00
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 07:04:55.660430 2026] [security2:error] [pid 22675:tid 22675] [client 45.3.51.69:50375] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qosmexico.com"] [uri "/wp/.git/config"] [unique_id "aZG2ZyEWJrhqujyjFzCZOgAAABk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-02-15 11:05:44
(5 months ago)
Scanning/Probing (27)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-15 10:53:03
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 05:52:59.648247 2026] [security2:error] [pid 31318:tid 31318] [client 45.3.51.69:51225] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "puckedtea.com"] [uri "/.env.save"] [unique_id "aZGli5n03oz-nT5jmAgYGQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-02-15 06:28:06
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: ...
show more
(mod_security) mod_security (id:210492) triggered by 45.3.51.69 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Feb 15 01:28:02.418121 2026] [security2:error] [pid 15179:tid 15195] [client 45.3.51.69:9253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "propertyinspectorsinc.com"] [uri "/.env.local"] [unique_id "aZFnchTYrrASWRUQoAVXfAAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ญ๐บ
Adorjan Daczo
2026-02-15 05:40:54
(5 months ago)
Probe for vulnerabilities. Path attempted: /frontend/.env
Web App Attack
๐บ๐ธ
OceanTreasure
2026-02-15 05:05:36
(5 months ago)
tcp/443; Environment file access attempt: "GET /api/.env" @ 2026-02-15T05:04:37Z [proxy]
Web App Attack