🇭🇺
miszterx.hu
2026-09-01 05:38:41
(16 minutes ago)
XORP (haproxy): 19x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 19x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇫🇷
masterguru
2026-09-01 05:22:23
(32 minutes ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇬🇧
consul.to
2026-09-01 05:08:40
(46 minutes ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-09-01 05:05:54
(49 minutes ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-197)
show less
Hacking
🇩🇪
sdos.es
2026-09-01 03:57:29
(1 hour ago)
"Restricted File Access Attempt - Matched Data: /.env found within REQUEST_FILENAME: /.env.local"
Web App Attack
🇨🇦
Bots.go.to.hell
2026-09-01 02:50:12
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-01 02:34:28
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 22:34:20.698129 2026] [security2:error] [pid 26903:tid 26903] [client 34.104.142.129:48496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.aquanauticsige.com"] [uri "/wp-config.php~"] [unique_id "apY5rJwvF3G06u7mugdCwgAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Apache
2026-09-01 01:27:42
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (JP/Japan/129.142.104.34.bc.goog ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (JP/Japan/129.142.104.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
2026-09-01 01:15:02
(4 hours ago)
suspicious request in access.log
Web App Attack
🇳🇱
e.fierstra
2026-09-01 00:34:19
(5 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:30:16
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:29:58.878735 2026] [security2:error] [pid 5351:tid 5351] [client 34.104.142.129:40610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rphenry.com"] [uri "/.env.old"] [unique_id "apYchgKG-GxBCr2AuEIqJwAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:13:25
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:13:19.621855 2026] [security2:error] [pid 30739:tid 30739] [client 34.104.142.129:37710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.belize-boat-registration.com"] [uri "/.env.save"] [unique_id "apYYnyoKfJzFIpanh4rRQwAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-08-31 23:54:19
(6 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.104.142.129 (JP/Japan/129.142.104.34. ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.104.142.129 (JP/Japan/129.142.104.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.104.142.129 - - [01/Sep/2026:01:54:14 +0200] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "crusader-worker/1.0" "-" host=confartigianato.pe.it
show less
Port Scan
🇺🇸
TPI-Abuse
2026-08-31 23:51:39
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.142.129 (129.142.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 19:51:32.018775 2026] [security2:error] [pid 20722:tid 20722] [client 34.104.142.129:58164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "collectorcarconsultants.com"] [uri "/.env.local"] [unique_id "apYThKyTpixR2HBdC00YJgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
interbiznw.com
2026-08-31 23:49:16
(6 hours ago)
sql-malicious-activity
Hacking
Brute-Force
Exploited Host
Web App Attack