🇩🇪
FeG Deutschland
2026-06-09 16:02:54
(2 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇫🇷
masterguru
2026-06-09 15:23:38
(2 hours ago)
Restricted File Access Attempt. Matched phrase "database.yml" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
2026-06-09 14:49:56
(3 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇫🇷
dynamix
2026-06-09 13:12:34
(4 hours ago)
Multiple WAF Violations
Web App Attack
2026-06-09 12:49:51
(5 hours ago)
[Tue Jun 09 08:49:51.128641 2026] [access_compat:error] [pid 16619] [client 34.11.52.4:40748] AH0179 ...
show more
[Tue Jun 09 08:49:51.128641 2026] [access_compat:error] [pid 16619] [client 34.11.52.4:40748] AH01797: client denied by server configuration: /var/www/victorbiro/phpinfo.php
[Tue Jun 09 08:49:51.132997 2026] [access_compat:error] [pid 17052] [client 34.11.52.4:40754] AH01797: client denied by server configuration: /var/www/victorbiro/info.php
[Tue Jun 09 08:49:51.148187 2026] [access_compat:error] [pid 17051] [client 34.11.52.4:40756] AH01797: client denied by server configuration: /var/www/victorbiro/php.php
[Tue Jun 09 08:49:51.152299 2026] [access_compat:error] [pid 17056] [client 34.11.52.4:40758] AH01797: client denied by server configuration: /var/www/victorbiro/test.php
[Tue Jun 09 08:49:51.156157 2026] [access_compat:error] [pid 16897] [client 34.11.52.4:40764] AH01797: client denied by server configuration: /var/www/victorbiro/debug.php
[Tue Jun 09 08:49:51.163369 2026] [access_compat:error] [pid 16619] [client 34.11.52.4:40778] AH01797: client denied by server configuration: /var/www/victorbiro/phpt
show less
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-06-09 12:06:24
(6 hours ago)
block ruleset Badbot using very old user-agents 5CF3CDB778C7D82564405B86B9242E612F378C68
Bad Web Bot
🇺🇸
TPI-Abuse
2026-06-09 11:29:41
(6 hours ago)
(mod_security) mod_security (id:210831) triggered by 34.11.52.4 (4.52.11.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210831) triggered by 34.11.52.4 (4.52.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 07:29:33.456825 2026] [security2:error] [pid 28931:tid 28931] [client 34.11.52.4:36004] ModSecurity: Access denied with code 403 (phase 2). Pattern match "(?i:(?:^(?:microsoft url|user-Agent|www\\\\.weblogs\\\\.com|(?:jakart|vi)a|(google|i{0,1}explorer{0,1}\\\\.exe|(ms){0,1}ie( [0-9.]{1,}){0,1} {0,1}(compatible( browser){0,1}){0,1})$)|\\\\bdatacha0s\\\\b|; widows|\\\\\\\\r|a(?: href=|d(?:sarobot|vanced email extractor ..." at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/03_Global_Agents.conf"] [line "29"] [id "210831"] [rev "2"] [msg "COMODO WAF: Rogue web site crawler||www.dev.handyrehab.com|F|4"] [data "Web Downloader"] [severity "WARNING"] [tag "CWAF"] [tag "Agents"] [hostname "www.dev.handyrehab.com"] [uri "/backend/config.yml"] [unique_id "aif5HflxNn8PdmwqpKB0NQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-06-09 10:49:22
(7 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇨🇭
4server
2026-06-09 08:57:32
(9 hours ago)
''
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-06-09 07:46:03
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.52.4 (4.52.11.34.bc.googleusercontent.com ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.52.4 (4.52.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Jun 09 03:45:57.021292 2026] [security2:error] [pid 22787:tid 22787] [client 34.11.52.4:54040] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.sanmarinoresidentagent.com"] [uri "/config/config.yml"] [unique_id "aifEtUVdv5J4I5i0PVsKKQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-09 03:33:42
(14 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇨🇭
zynex
2026-06-09 02:31:51
(15 hours ago)
URL Probing: /config/mail.php
Web App Attack
2026-06-09 01:20:47
(16 hours ago)
(caddyscan) Scanner path probe from 34.11.52.4 (US/United States/4.52.11.34.bc.googleusercontent.com ...
show more
(caddyscan) Scanner path probe from 34.11.52.4 (US/United States/4.52.11.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.11.52.4 - - [09/Jun/2026:01:20:45 +0000] "GET /api/actuator/heapdump HTTP/1.1"
[REDACTED] 200 2627 34.11.52.4 - - [09/Jun/2026:01:20:45 +0000] "GET /api/actuator/env HTTP/1.1"
[REDACTED] 200 2627 34.11.52.4 - - [09/Jun/2026:01:20:45 +0000] "GET /actuator/threaddump HTTP/1.1"
[REDACTED] 200 2627 34.11.52.4 - - [09/Jun/2026:01:20:45 +0000] "GET /actuator/logfile HTTP/1.1"
[REDACTED] 200 2627 34.11.52.4 - - [09/Jun/2026:01:20:45 +0000] "GET /api/actuator/logfile HTTP/1.1"
show less
Port Scan
🇮🇹
VHosting
2026-06-09 01:15:03
(16 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇱🇻
garmtech.com
2026-06-09 00:31:03
(17 hours ago)
IM360 WAF: Information Disclosure Attempt in WordPress MV:/wp-config.bak
Web App Attack