๐ฟ๐ฆ
conure.sh
2026-10-15 12:00:21
(11 hours ago)
csagent: score 22.8: 404 noise floor x7, phpunit eval-stdin RCE x1, secrets grab x1; 1 domain(s) in ...
show more
csagent: score 22.8: 404 noise floor x7, phpunit eval-stdin RCE x1, secrets grab x1; 1 domain(s) in 10s
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 09:34:01
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 05:33:57.745684 2026] [security2:error] [pid 2190:tid 2190] [client 134.199.145.180:45638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ahelfrick.com"] [uri "/.env"] [unique_id "atCeBfOY9BNVNJFEW6oeJQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
fazar
2026-10-15 08:20:44
(14 hours ago)
crowdsecurity/CVE-2017-9841 on node: us01
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 08:12:37
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 04:12:34.066756 2026] [security2:error] [pid 7350:tid 7350] [client 134.199.145.180:14256] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "aguaflot.aguasolar.com"] [uri "/.env"] [unique_id "atCK8tH6IP-KcK2NViHvTQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-15 07:36:46
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 03:36:41.276696 2026] [security2:error] [pid 3567:tid 3567] [client 134.199.145.180:39776] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agri-stor.totalstorage.solutions"] [uri "/.env"] [unique_id "atCCiTDMpK7qJoRh0QuvvAAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
elcruzado.es
2026-10-15 07:36:10
(15 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 134.199.145.180 (AU/Australia/-)
SQL Injection
๐บ๐ธ
dot.mg
2026-10-15 07:35:22
(15 hours ago)
Bad behaviour
Web Spam
๐ฉ๐ช
maxpower
2026-10-15 07:17:16
(15 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 134.199.145.180 (AU/Australia/-): 1 in t ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 134.199.145.180 (AU/Australia/-): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 134.199.145.180 - - [15/Oct/2026:09:17:15 +0200] "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/2.0" 200 4842 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36" "-" host=agrariaabruzzo.it
show less
Port Scan
Anonymous
2026-10-15 07:02:55
(16 hours ago)
XSS Attempt
Hacking
๐ต๐ฑ
jekob
2026-10-15 07:02:01
(16 hours ago)
Automated malicious activity detected (1 events)
Hacking
Web App Attack
๐ธ๐ช
Minglarn
2026-10-15 06:53:15
(16 hours ago)
Malicious crawler, scraper or bad bot detected. (3 hits). Log: 134.199.145.180 - - [15/Oct/2026:06:5 ...
show more
Malicious crawler, scraper or bad bot detected. (3 hits). Log: 134.199.145.180 - - [15/Oct/2026:06:53:14 +0000] "GET / HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
134.199.145.180 - - [15/Oct/2026:06:53:14 +0000] "POST /vendor/phpunit/phpunit/src/Util/PHP/[REDACTED_DOMAIN] HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
134.199.145.180 - - [15/Oct/2026:06:53:14 +0000] "POST / HTTP/1.1" 404 952 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-15 06:24:17
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Po ...
show more
(mod_security) mod_security (id:210492) triggered by 134.199.145.180 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 02:24:11.247232 2026] [security2:error] [pid 29405:tid 29405] [client 134.199.145.180:30098] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agingworkforcenews.com"] [uri "/.env"] [unique_id "atBxi8h8EHLZTDaffus_iQAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Omega Threat-ID
2026-10-15 04:46:07
(18 hours ago)
Omega Point Threat ID honeypot sensor observed: scanner, malicious, abuse-reported
Port Scan
Hacking
๐บ๐ธ
Lee Daniel
2026-10-15 04:16:32
(18 hours ago)
134.199.145.180 - - [15/Oct/2026:00:16:31 -0400] "GET /.env HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Win ...
show more
134.199.145.180 - - [15/Oct/2026:00:16:31 -0400] "GET /.env HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/125.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-15 04:11:56
(18 hours ago)
PHPUnit Command Injection (CVE-2017-9841).
Web App Attack