🇩🇪
Progetto1
2026-07-20 04:30:03
(1 week ago)
Detected via HAProxyScanner at 2026-07-20 04:30:03 UTC on destination port WEB (80/443). Repeated sc ...
show more
Detected via HAProxyScanner at 2026-07-20 04:30:03 UTC on destination port WEB (80/443). Repeated scan / connection.
show less
Port Scan
Hacking
Brute-Force
🇫🇷
COMAITE
2026-07-18 12:28:06
(1 week ago)
Suspicious URL access.
Web App Attack
🇺🇸
Matthew Ping
2026-07-18 01:30:06
(1 week ago)
ModSecurity rule 949110 triggered on banks. Web application attack blocked by CSF/LFD.
Web App Attack
Hacking
🇫🇷
dynamix
2026-07-18 01:05:12
(1 week ago)
Multiple WAF Violations
Web App Attack
🇯🇵
Kinsei Engineering Inc.
2026-07-18 00:49:14
(1 week ago)
2026/07/18 09:49:09 [error] 325825#325825: *57685 access forbidden by rule, client: 95.155.151.44, s ...
show more
2026/07/18 09:49:09 [error] 325825#325825: *57685 access forbidden by rule, client: 95.155.151.44, server: www.kinsei.jp, request: "GET /.env.save HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp/.env.save"
2026/07/18 09:49:10 [error] 325825#325825: *57686 access forbidden by rule, client: 95.155.151.44, server: www.kinsei.jp, request: "GET /.env.local HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp/.env.local"
2026/07/18 09:49:13 [error] 325825#325825: *57685 access forbidden by rule, client: 95.155.151.44, server: www.kinsei.jp, request: "GET /.env.example HTTP/2.0", host: "www.kinsei.jp", referrer: "https://kinsei.jp/.env.example"
show less
Brute-Force
Web Spam
🇺🇸
TPI-Abuse
2026-07-18 00:48:13
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 95.155.151.44 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 95.155.151.44 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 17 20:48:07.576993 2026] [security2:error] [pid 23071:tid 23071] [client 95.155.151.44:55571] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.shadowveil.io"] [uri "/.git/config"] [unique_id "alrNR1pj_QkU4bKR8P-yWgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
dave
2026-07-18 00:36:40
(1 week ago)
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ...
show more
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config targets=cloud hit_count=7 first_seen=2026-07-18T00:36:40Z last_seen=2026-07-18T00:36:40Z
show less
Web App Attack
🇮🇹
VHosting
2026-07-18 00:35:04
(1 week ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇫🇷
SpaceHost-Server
2026-07-17 22:36:29
(1 week ago)
Brute-Force
Web App Attack
🇨🇭
Origon
2026-07-17 18:34:59
(1 week ago)
http-sensitive-files - IP: 95.155.151.44 - time="2026-07-17T20:34:59+02:00" level=info msg="(555f66 ...
show more
http-sensitive-files - IP: 95.155.151.44 - time="2026-07-17T20:34:59+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 95.155.151.44 (NL/30058) : 4h ban on Ip 95.155.151.44" module=db
show less
Web App Attack
🇩🇪
macrob
2026-07-17 18:33:38
(1 week ago)
2026/07/17 18:33:37 [error] 4129453#4129453: *384454843 access forbidden by rule, client: 95.155.151 ...
show more
2026/07/17 18:33:37 [error] 4129453#4129453: *384454843 access forbidden by rule, client: 95.155.151.44, server: 100fs.org, request: "GET /.env.save HTTP/1.1", host: "100fs.org"
2026/07/17 18:33:37 [error] 4129457#4129457: *384454844 access forbidden by rule, client: 95.155.151.44, server: 100fs.org, request: "GET /.git/HEAD HTTP/1.1", host: "100fs.org"
2026/07/17 18:33:37 [error] 4129457#4129457: *384454845 access forbidden by rule, client: 95.155.151.44, server: 100fs.org, request: "GET /.env.prod HTTP/1.1", host: "100fs.org"
...
show less
Web App Attack