๐ฉ๐ช
webanyone
2026-10-03 10:21:53
(2 weeks ago)
WAF-refused requests | path: /rclone.conf, /server.key, /privatekey.key (+5 more)
Web App Attack
Hacking
๐ง๐ฌ
alnaasd
2026-08-10 13:14:53
(2 months ago)
WAF block action triggered by rule set "Version Control - Information Disclosure" (115 occurrences o ...
show more
WAF block action triggered by rule set "Version Control - Information Disclosure" (115 occurrences observed).
show less
Web App Attack
Anonymous
2026-07-29 07:00:00
(2 months ago)
Apache probe; attempts=1759; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.devel ...
show more
Apache probe; attempts=1759; exact paths: /.env | /.env.backup | /.env.bak | /.env.dev | /.env.development | /.env.example | /.env.local | /.env.old | /.env.php.bak | /.env.prod.bak | /.env.production | /.env.production.bak | /.env.staging | /.env.swp | /.env.test | /.git-credentials | /.git/HEAD | /.git/config | /.hermes/.env | /.openclaw/.env | /@fs/.env?raw?? | /@fs/root/.env?raw?? | /actuator | /actuator/configprops | /actuator/env | /actuator/mappings | /admin/.env | /api/.env | /api/.env/ | /app/.env | /backend/.env | /config.env | /config/.env | /config/.env.php | /core/.env | /dev/.env | /docker/.env | /frontend/.env | /laravel/.env | /production/.env | /public/.env | /sendgrid.env | /server/.env | /src/.env | /staging/.env | /web/.env
show less
Web App Attack
๐ท๐บ
ago.su
2026-07-27 12:50:24
(2 months ago)
F2B blocked nginx bad bot [otd]
Hacking
Web App Attack
๐ณ๐ฑ
debestelapp
2026-07-27 11:40:06
(2 months ago)
Web App Attack
๐ฆ๐น
penguin-solutions.at
2026-07-27 11:02:33
(2 months ago)
Excessive 403/404 errors
...
Brute-Force
Web App Attack
๐ณ๐ฑ
Site.eu
2026-07-27 10:43:53
(2 months ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-07-27 10:04:21
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 8.229.36.21 (US/United States/21.36.229 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 8.229.36.21 (US/United States/21.36.229.8.bc.googleusercontent.com)
show less
SQL Injection
๐ณ๐ฑ
e.fierstra
2026-07-27 07:07:47
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ญ๐บ
DumaNet
2026-07-27 02:48:00
(2 months ago)
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 17:39:38
Source IP: 8.229. ...
show more
Web app attack attempts, scanning for vulnerability.
Date: 2026 Jul 26. 17:39:38
Source IP: 8.229.36.21
Portion of the log(s):
8.229.36.21 - [26/Jul/2026:17:39:38 +0200] "GET /.env.example HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
8.229.36.21 - [26/Jul/2026:17:39:38 +0200] "GET /.gitconfig HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
8.229.36.21 - [26/Jul/2026:17:39:38 +0200] "GET /rclone.conf HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
8.229.36.21 - [26/Jul/2026:17:39:38 +0200] "GET /z9x8c7v6b5-debug-trigger-cloud.dumanet.hu HTTP/1.1" 404 153 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
8.229.36.21 - [26/Jul/2026:17:39:38 +0200] "GET /.git/HEAD HTTP/1.1" 404 153 "-" "Mozilla
show less
Web App Attack
๐ณ๐ฑ
Eric
2026-07-26 23:22:58
(2 months ago)
[Sun Jul 26 23:22:55.633275 2026] [security2:error] [pid 2652228:tid 2652228] [client 8.229.36.21:0] ...
show more
[Sun Jul 26 23:22:55.633275 2026] [security2:error] [pid 2652228:tid 2652228] [client 8.229.36.21:0] [client 8.229.36.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/z9x8c7v6b5-debug-trigger-pop-the-slots.com"] [unique_id "amaWzy7ldNqUuqWoHbT5AAAAAAM"]
[Sun Jul 26 23:22:55.637071 2026] [security2:error] [pid 2579372:tid 2579372] [client 8.229.36.21:0] [client 8.229.36.21] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceed
...
show less
Hacking
Web App Attack
๐ณ๐ฑ
Savvii
2026-07-26 20:00:36
(2 months ago)
20 attempts against mh-misbehave-ban on solar
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
voormedia
2026-07-26 16:10:32
(2 months ago)
Accessed trap at '/.aws/config'
Web App Attack
๐ณ๐ฑ
Savvii
2026-07-26 16:08:06
(2 months ago)
20 attempts against mh-misbehave-ban on burne
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-07-26 14:32:57
(2 months ago)
Probing websites for vulnerabilities
Web App Attack
SQL Injection