2026-07-29 07:00:00
(3 weeks ago)
Apache probe; attempts=1020; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.e ...
show more
Apache probe; attempts=1020; exact paths: /.env | /.env.backup | /.env.backup1 | /.env.backup2 | /.env.bak | /.env.ci | /.env.dev | /.env.development | /.env.dist | /.env.docker | /.env.example | /.env.json | /.env.live | /.env.local | /.env.old | /.env.preprod | /.env.prod | /.env.production | /.env.remote | /.env.sample | /.env.save | /.env.stage | /.env.staging | /.env.swp | /.env.test | /.env.txt | /.env.uat | /.env.yaml | /.env.yml | /.env~ | /.git/.env | /.git/config | /actions/.env | /admin-panel/.env | /admin/.env | /administrator/.env | /angular/.env | /ansible/.env | /api/.env | /api/dev/.env | /api/staging/.env | /api/v1/.env | /api/v2/.env | /api/v3/.env | /app/.env | /application/.env | /apps/.env | /assets/.env | /aws/.env | /azure/.env | /backend/.env | /backup/.env | /backups/.env | /beta/.env | /bin/.env | /bootstrap/.env | /brevo/.env | /build/.env | /buildkite/.env | /bulk/.env | /cache/.en | ... [204 exact paths total]
show less
Web App Attack
🇳🇱
homeshowdomain.nl
2026-07-25 22:01:12
(3 weeks ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-07-24.
show less
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-07-24 11:59:35
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 07:59:30.600101 2026] [security2:error] [pid 3935430:tid 3935430] [client 3.14.1.26:52156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.rgvatvrepair.com.worldchat.global"] [uri "/.git/config"] [unique_id "amNTouhYlFGZJ-L6NFM_QQAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-07-24 09:52:18
(4 weeks ago)
Multiple WAF Violations
Web App Attack
🇿🇦
conure.sh
2026-07-24 09:34:56
(4 weeks ago)
csagent: score 20.0: secrets grab x2; 1 domain(s) in 0s
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 08:36:27
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 04:36:21.439511 2026] [security2:error] [pid 3375776:tid 3375776] [client 3.14.1.26:53078] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.revelation-of-truth.galaxyretro.com"] [uri "/.git/config"] [unique_id "amMkBXIwRtOrnPCcroRFwwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-24 06:37:16
(4 weeks ago)
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amaz ...
show more
(mod_security) mod_security (id:210492) triggered by 3.14.1.26 (ec2-3-14-1-26.us-east-2.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Jul 24 02:37:09.971134 2026] [security2:error] [pid 988355:tid 988355] [client 3.14.1.26:43244] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.resume.alexsource.com"] [uri "/.git/config"] [unique_id "amMIFaCzpIbb2cwpRUCT_AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇱🇻
garmtech.com
2026-07-24 04:50:51
(4 weeks ago)
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js ...
show more
IM360 WAF: RCE via prototype pollution in React Server Components < 19.0.1/19.1.2/19.2.1 or Next.js < 15.0.5/16.0.7 (CVE-2025-55182, CVE-2025-66478)
show less
Hacking
🇮🇹
VHosting
2026-07-24 03:50:04
(4 weeks ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇺🇸
tinyshield.me
2021-11-28 21:24:49
(4 years ago)
Provided by tinyshield.me - Simple Security For WordPress
Brute-Force
Web App Attack