🇫🇷
Lunix
2026-08-28 17:56:06
(38 minutes ago)
Brute-Force
Web App Attack
🇩🇪
Hazzard
2026-08-28 17:07:32
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇪🇸
elcruzado.es
2026-08-28 17:05:32
(1 hour ago)
(mod_security) mod_security triggered on hostname [redacted] 34.11.64.44 (US/United States/44.64.11. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.11.64.44 (US/United States/44.64.11.34.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
WeCloudit-Anti-Abuse
2026-08-28 16:36:13
(1 hour ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇩🇪
maxpower
2026-08-28 16:26:05
(2 hours ago)
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.11.64.44 (US/United States/44.64.11.34.bc.g ...
show more
(nginx_hardened) REGOLA 3 - Nginx Hardening Triggered 34.11.64.44 (US/United States/44.64.11.34.bc.googleusercontent.com): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 2026/08/28 18:25:59 [error] 1442123#1442123: *778593 access forbidden by rule, client: 34.11.64.44, server: lucadipa.accademiam.com, request: "GET /wp-config.php~ HTTP/1.1", host: "www.lucadipa.accademiam.com"
2026/08/28 18:25:59 [error] 1442127#1442127: *778592 access forbidden by rule, client: 34.11.64.44, server: lucadipa.accademiam.com, request: "GET /wp-config.php.swp HTTP/1.1", host: "www.lucadipa.accademiam.com"
2026/08/28 18:25:59 [error] 1442135#1442135: *778605 access forbidden by rule, client: 34.11.64.44, server: lucadipa.accademiam.com, request: "GET /wp-config.php.bak HTTP/1.1", host: "www.lucadipa.accademiam.com"
show less
Port Scan
🇺🇸
mnsf
2026-08-28 16:05:33
(2 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack
🇩🇪
Balthasar Morpheus Jörmundur (JKweb Service)
2026-08-28 15:40:09
(2 hours ago)
JKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Director ...
show more
JKweb Security: Severe and dangerous web attack detected. Vulnerability Wordpress Scanning, Directory Brute-Forcing / Content Discovery, Predictable Resource Location / Forced Browsing, Scan for administration and debugging interfaces of modern frameworks, Scan for Spring Boot Actuator Leaks, Scan for Cloud & Infrastructure Credentials, Scan for Database & Backup Dumps, Scan for IDE- und Editor-Configurations, Scan for CI/CD Pipelines & GitHub Workflows etc. The Attacker is permanently banned by Fail2Ban, configurate by JKweb Security a brand of JKweb Service.
show less
Port Scan
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-08-28 15:15:55
(3 hours ago)
Multiple WAF Violations
Web App Attack
2026-08-28 15:07:07
(3 hours ago)
Automated web scanner. Requested suspicious paths: /.env.local | /crusader-404-probe | /.env | /.env ...
show more
Automated web scanner. Requested suspicious paths: /.env.local | /crusader-404-probe | /.env | /.env.dev | /.env.old | /.env.save | /storage/logs/laravel.log | /actuator/configprops | /_ignition/health-check | /actuator/env | /.env.bak | /.env.backup | /.env.example | /env, /.env.production | /crusader-404-probe | /.env | /.env.dev | /.env.old | /.env.save | /storage/logs/laravel.log | /actuator/configprops | /_ignition/health-check | /actuator/env | /.env.bak | /.env.backup | /.env.example | /env. UTC: 2026-08-28 14:27:00.
show less
Web App Attack
🇧🇪
sid3windr
2026-08-28 15:01:41
(3 hours ago)
GET /.env (Tarpitted for 2m10s, wasted 7.73kB)
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 14:49:36
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:49:29.964716 2026] [security2:error] [pid 20579:tid 20579] [client 34.11.64.44:55232] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.periodpiano.org"] [uri "/.env.production"] [unique_id "apGf-a2z4WhfRakT-xIO3wAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 14:30:56
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:30:52.448328 2026] [security2:error] [pid 11348:tid 11348] [client 34.11.64.44:58220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.elessenlabz.com.lucid-events.com"] [uri "/wp-config.php.swp"] [unique_id "apGbnIfpBFNlHNZcPZ4VyAAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-28 14:22:17
(4 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-28 14:12:31
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.11.64.44 (44.64.11.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 10:12:27.127673 2026] [security2:error] [pid 5266:tid 5266] [client 34.11.64.44:39012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.pamplonaserviciotecnico.com"] [uri "/.env.local"] [unique_id "apGXS3wTqY0zmqwi-hnXXgAAAEQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-28 13:50:02
(4 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack