🇩🇪
rh24
2026-11-14 04:30:05
UTC ·
(18 minutes ago)
HTTP flood or excessive requests, blocked by host firewall.
DDoS Attack
Web App Attack
🇫🇷
security.rdmc.fr
2026-11-14 04:28:17
UTC ·
(19 minutes ago)
Activity from blacklisted IP
Hacking
🇫🇷
regishoussin
2026-11-14 04:10:27
UTC ·
(37 minutes ago)
Automated web scanning detected by Wazuh (rule 100241): repeated 400/404 errors from mass probing of admin/backdoor paths (e.g. wp-login.php, known CMS shell filenames) on an Apache web server, on 2026-11-14 04:10 UTC.
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-14 03:56:27
UTC ·
(51 minutes ago)
Web attack/malicious scanning detected
Web App Attack
🇸🇪
ljo
2026-11-14 02:56:13
UTC ·
(1 hour ago)
45.138.12.15 - - [14/Nov/2026:03:55:53 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 ...
show more
45.138.12.15 - - [14/Nov/2026:03:55:53 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:54 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:55 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:55 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:55 +0100] "GET / HTTP/1.0" 400 482 "-" "-"
45.138.12.15 - - [14/Nov/2026:03:55:55 +0100] "GET /
...
show less
DDoS Attack
🇬🇧
foxxelabs
2026-11-14 02:23:14
UTC ·
(2 hours ago)
Automated report from FoxxeLabs Sentinel. Path probed: /setTheme('bright') | Project: taca | Reason(s): Scanner: 4 paths in 1hr; AbuseIPDB score: 100/100 | User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0
Port Scan
🇩🇪
Laplus
2026-11-14 01:55:59
UTC ·
(2 hours ago)
2026/11/14 02:53:21 [error] 117655#117655: *2487531 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.git/config HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:21 [error] 117655#117655: *2487532 access forbidde ...
show more
2026/11/14 02:53:21 [error] 117655#117655: *2487531 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.git/config HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:21 [error] 117655#117655: *2487532 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.svn/entries HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:21 [error] 117655#117655: *2487533 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.svn/wc.db HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:24 [error] 117655#117655: *2487553 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.s3cfg HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:24 [error] 117655#117655: *2487540 access forbidden by rule, client: 45.138.12.15, server: cunny.network, request: "GET /.AWS_/credentials HTTP/1.1", host: "cunny.network"
2026/11/14 02:53:24 [error] 117654#117654: *2487544 access forbidden by rule, client
...
show less
Web App Attack
🇬🇧
matbargob
2026-11-14 01:31:45
UTC ·
(3 hours ago)
CrowdSec crowdsecurity/http-sensitive-files: 5 events 2026-11-14 01:31:45 - 01:31:45 UTC. Method: GET. Paths: /.git/config, /.svn/entries, /config/secrets.yml, /.aws/credentials, /.aws/config. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; rv:91.0) G ...
show more
CrowdSec crowdsecurity/http-sensitive-files: 5 events 2026-11-14 01:31:45 - 01:31:45 UTC. Method: GET. Paths: /.git/config, /.svn/entries, /config/secrets.yml, /.aws/credentials, /.aws/config. Status: 404. UA: Mozilla/5.0 (Windows NT 10.0; rv:91.0) Gecko/20100101 Firefox/91.0, Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36
show less
Web App Attack
Anonymous
2026-11-14 01:25:53
UTC ·
(3 hours ago)
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/credentials.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/secrets.yml HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /static/js/c ...
show more
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/credentials.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/secrets.yml HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /static/js/config.js HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /aws-secret.yaml HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/storage.yml HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /s3_config.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /s3.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /configs/s3_config.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /config/aws.json HTTP/1.1" 404 30397
45.138.12.15 - - [14/Nov/2026:02:25:46 +0100] "GET /appsettings.json HTTP/1.1" 404 30397
...
show less
Web Spam
Web App Attack
Anonymous
2026-11-14 01:15:49
UTC ·
(3 hours ago)
Attempted access to sensitive endpoint (/config/s3.json) detected. Automated scan or unauthorized probing.
Web App Attack
🇺🇸
TPI-Abuse
2026-11-14 00:56:25
UTC ·
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 45.138.12.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:56:19.210519 2026] [security2:error] [pid 28215:tid 28215] [client 45.138.12.15:0] ModSecu ...
show more
(mod_security) mod_security (id:210492) triggered by 45.138.12.15 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 13 19:56:19.210519 2026] [security2:error] [pid 28215:tid 28215] [client 45.138.12.15:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "chaitanyaconsult.in"] [uri "/.env"] [unique_id "avexs9DERsh34qNdQwfg6QAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Yosi
2026-11-14 00:27:45
UTC ·
(4 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇳🇱
enpepet
2026-11-14 00:25:51
UTC ·
(4 hours ago)
GENERAL: parametres: [url:env=] UA:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 Chrome/122.0.0.0 Safari/537.36 URL:/.env
Port Scan
Hacking
Brute-Force
Bad Web Bot
🇺🇸
jhuisi
2026-11-14 00:09:52
UTC ·
(4 hours ago)
Mod Security Hit
Web App Attack
🇧🇾
lns.bz
2026-11-14 00:06:56
UTC ·
(4 hours ago)
.env scanning [BY]
Web App Attack