🇺🇸
mnsf
2026-09-02 00:05:31
(11 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇸🇬
simpeg-adm.bandung.go.id
2026-09-01 06:31:54
(1 day ago)
...
Web Spam
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 05:22:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:22:52.983358 2026] [security2:error] [pid 9699:tid 9755] [client 34.106.99.12:57316] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "expozium.annybelle.org"] [uri "/wp-config.php~"] [unique_id "apZhLIClfv2axdBNit3T8gAAAZQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
lolyay
2026-09-01 05:03:44
(1 day ago)
34.106.99.12 - - [01/Sep/2026:05:03:43 +0000] "GET /.env HTTP/1.1" 200 4 "-" "crusader-worker/1.0"
3 ...
show more
34.106.99.12 - - [01/Sep/2026:05:03:43 +0000] "GET /.env HTTP/1.1" 200 4 "-" "crusader-worker/1.0"
34.106.99.12 - - [01/Sep/2026:05:03:43 +0000] "GET /actuator/configprops HTTP/1.1" 200 4 "-" "crusader-worker/1.0"
...
show less
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-01 04:55:53
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:55:45.202490 2026] [security2:error] [pid 4888:tid 4888] [client 34.106.99.12:42552] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "abbysue.com"] [uri "/.env.local"] [unique_id "apZa0WF5BWft6tVNoQP0WwAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 03:25:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇩🇪
kkeyser
2026-09-01 02:58:02
(1 day ago)
GET /.env.bak HTTP/1.1
Web App Attack
🇺🇸
technojoe99
2026-09-01 02:51:24
(1 day ago)
Exploit scan from 34.106.99.12. GET /.env.example HTTP/1.1.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 00:20:05
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 20:19:55.638885 2026] [security2:error] [pid 8837:tid 8840] [client 34.106.99.12:36950] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.adetnw.com"] [uri "/wp-config.php~"] [unique_id "apYaKznVa2Qq39OCx1VtVwAAAIA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
YF
2026-09-01 00:00:18
(1 day ago)
WordPress config file probe
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-31 23:36:54
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-31 23:30:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.106.99.12 (12.99.106.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 19:30:16.775330 2026] [security2:error] [pid 25946:tid 25946] [client 34.106.99.12:44692] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cccorponline.com"] [uri "/.env.prod"] [unique_id "apYOiCzGY_Ts0keo8G9L8AAAAGQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-08-31 23:05:52
(1 day ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-08-31 22:45:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
dynamix
2026-08-31 22:33:25
(1 day ago)
Multiple WAF Violations
Web App Attack