Anonymous
2026-07-29 07:00:00
(3 hours ago)
Apache probe; attempts=1055; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.e ...
show more
Apache probe; attempts=1055; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.env.bak | /.env.ci | /.env.dev | /.env.development | /.env.dist | /.env.docker | /.env.example | /.env.fly | /.env.json | /.env.live | /.env.local | /.env.neon | /.env.old | /.env.preprod | /.env.prod | /.env.production | /.env.railway | /.env.remote | /.env.render | /.env.sample | /.env.save | /.env.stage | /.env.staging | /.env.supabase | /.env.swp | /.env.test | /.env.txt | /.env.uat | /.env.vault | /.env.vercel | /.env.yaml | /.env.yml | /.env~ | /.git/.env | /.git/config | /actions/.env | /admin-panel/.env | /admin/.env | /administrator/.env | /angular/.env | /ansible/.env | /api/.env | /api/dev/.env | /api/staging/.env | /api/v1/.env | /api/v2/.env | /api/v3/.env | /app/.env | /application/.env | /apps/.env | /assets/.env | /aws/.env | /azure/.env | /backend/.env | /backup/.env | /backups/.env | /beta/.env | ... [211 exact paths total]
show less
Web App Attack
๐ซ๐ท
dynamix
2026-07-28 03:41:42
(1 day ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
hbrks
2026-07-27 12:18:42
(1 day ago)
150 attack(s) detected, such as these: {"event":"web_block","ip":"98.93.184.207","host":"adalta.soci ...
show more
150 attack(s) detected, such as these: {"event":"web_block","ip":"98.93.184.207","host":"adalta.social","request":"GET /logs/.env HTTP/1.1","user_agent":"","reason":"Status-404","timestamp":"2026-07-27T12:18:42 00:00","logentry":"adalta.social 98.93.184.207 - - [27/Jul/2026:14:18:42 0200] \"GET /logs/.env HTTP/1.1\" 404 555 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" \"-\""} * Report Details *: https://p4u.xyz/AI4GL8UX0TO/1* IP Details *: https://p4u.xyz/AI4GL8UX0TO/2
show less
Web Spam
Hacking
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-07-25 09:39:05
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 98.93.184.207 (ec2-98-93-184-207.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.184.207 (ec2-98-93-184-207.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jul 25 05:38:57.725862 2026] [security2:error] [pid 2762730:tid 2762730] [client 98.93.184.207:37918] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.179vfs.com"] [uri "/.git/config"] [unique_id "amSEMaP5xgeuTByk5FHtHAAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
lolyay
2026-07-25 03:27:58
(4 days ago)
98.93.184.207 - - [25/Jul/2026:03:27:56 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 ...
show more
98.93.184.207 - - [25/Jul/2026:03:27:56 +0000] "GET /.git/config HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
98.93.184.207 - - [25/Jul/2026:03:27:57 +0000] "GET /.env HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Bad Web Bot
๐ณ๐ฑ
homeshowdomain.nl
2026-07-24 22:00:18
(4 days ago)
Auto-ban: >3000 req/min op 2026-07-24
Web App Attack
SSH
Hacking
๐บ๐ธ
TPI-Abuse
2026-07-24 07:51:17
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 98.93.184.207 (ec2-98-93-184-207.compute-1.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 98.93.184.207 (ec2-98-93-184-207.compute-1.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 03:51:12.874807 2026] [security2:error] [pid 1079004:tid 1079004] [client 98.93.184.207:58242] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.lexie.org"] [uri "/.git/config"] [unique_id "amMZcD0Mg_VqxAjj246lUAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-07-24 05:15:04
(5 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
Anonymous
2026-07-24 03:48:22
(5 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack