๐ต๐ฑ
mscode.pl
2026-07-21 16:56:14
(3 days ago)
Triggered Cloudflare WAF (firewallManaged) from SA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Pro ...
show more
Triggered Cloudflare WAF (firewallManaged) from SA.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Zone: admin.e-modo.pl
Endpoint: /wp-config.php.bak
UA: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
show less
Bad Web Bot
๐ฌ๐ง
Aetherweb Ark
2026-07-21 16:43:31
(3 days ago)
(mod_security) mod_security (id:949110) triggered by 34.166.4.53 (SA/Saudi Arabia/53.4.166.34.bc.goo ...
show more
(mod_security) mod_security (id:949110) triggered by 34.166.4.53 (SA/Saudi Arabia/53.4.166.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ซ๐ท
largo-it.net
2026-07-21 15:09:03
(3 days ago)
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.451] www_fron ...
show more
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.451] www_frontend~ sso1_cluster/sso1_https 0/0/1/15/16 404 1250 - - ---- 61/15/2/2/0 0/0 "GET https://sso.largo.fr/rclone.conf HTTP/2.0"
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.452] www_frontend~ sso1_cluster/sso1_https 0/0/1/26/27 404 1250 - - ---- 61/15/4/4/0 0/0 "GET https://sso.largo.fr/.aws/config HTTP/2.0"
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.462] www_frontend~ sso1_cluster/sso1_https 0/0/0/23/23 404 1250 - - ---- 61/15/3/3/0 0/0 "GET https://sso.largo.fr/sw.js HTTP/2.0"
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.469] www_frontend~ sso1_cluster/sso1_https 0/0/1/23/24 404 1250 - - ---- 61/15/2/2/0 0/0 "GET https://sso.largo.fr/wp-json HTTP/2.0"
Jul 21 17:09:03 vps-9f3cdc33 haproxy[1923966]: 34.166.4.53:48364 [21/Jul/2026:17:09:03.470] www_frontend~ sso1_clu
...
show less
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
Quarks Solutions
2026-07-21 14:47:05
(3 days ago)
crowdsecurity/appsec-vpatch
Web App Attack
Anonymous
2026-07-21 14:26:37
(3 days ago)
[Tue Jul 21 14:52:53.980812 2026] [proxy_fcgi:error] [pid 178355:tid 178510] [client 34.166.4.53:608 ...
show more
[Tue Jul 21 14:52:53.980812 2026] [proxy_fcgi:error] [pid 178355:tid 178510] [client 34.166.4.53:60800] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 16:26:36.367626 2026] [proxy_fcgi:error] [pid 178532:tid 178568] [client 34.166.4.53:36356] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 16:26:36.391661 2026] [proxy_fcgi:error] [pid 178532:tid 178570] [client 34.166.4.53:36280] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 16:26:36.367626 2026] [proxy_fcgi:error] [pid 178532:tid 178568] [client 34.166.4.53:36356] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
Anonymous
2026-07-21 14:09:52
(3 days ago)
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /env.js HTTP/1.1" 404 29860
34.166.4.53 - - [21/Ju ...
show more
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /env.js HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /z9x8c7v6b5-debug-trigger-crypcool.com HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /serviceAccountKey.json HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /__/firebase/init.json HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /v1/graphql HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /secrets.yml HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /firebase-adminsdk.json HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /api/v1/settings HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /api/v2/config HTTP/1.1" 404 29860
34.166.4.53 - - [21/Jul/2026:16:09:45 +0200] "GET /settings.json HTTP/1.1" 404 29860
...
show less
Web Spam
Web App Attack
๐ช๐ธ
alferez
2026-07-21 14:01:22
(3 days ago)
Searching .(env|sql|zip|tar|rar) files
Hacking
Exploited Host
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-07-21 13:22:31
(3 days ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
grassau.com
2026-07-21 13:19:19
(3 days ago)
34.166.4.53 (SA/Saudi Arabia/Eastern Province/Dammam/53.4.166.34.bc.googleusercontent.com), more tha ...
show more
34.166.4.53 (SA/Saudi Arabia/Eastern Province/Dammam/53.4.166.34.bc.googleusercontent.com), more than 30 Apache 403 hits
show less
Hacking
Anonymous
2026-07-21 12:52:54
(3 days ago)
[Tue Jul 21 14:52:52.470004 2026] [proxy_fcgi:error] [pid 178356:tid 178465] [client 34.166.4.53:609 ...
show more
[Tue Jul 21 14:52:52.470004 2026] [proxy_fcgi:error] [pid 178356:tid 178465] [client 34.166.4.53:60900] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 14:52:53.522649 2026] [proxy_fcgi:error] [pid 178354:tid 178419] [client 34.166.4.53:60926] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 14:52:53.621104 2026] [proxy_fcgi:error] [pid 178354:tid 178433] [client 34.166.4.53:60926] AH01071: Got error 'Primary script unknown'
[Tue Jul 21 14:52:53.522649 2026] [proxy_fcgi:error] [pid 178354:tid 178419] [client 34.166.4.53:60926] AH01071: Got error 'Primary script unknown'
...
show less
Brute-Force
Web App Attack
๐ฟ๐ฆ
conure
2026-07-21 12:46:59
(3 days ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
๐บ๐ธ
antlac1
2026-07-21 12:45:27
(3 days ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
๐ฑ๐ป
garmtech.com
2026-07-21 11:42:32
(3 days ago)
IM360 WAF: Direct access to sensitive file or dotfile MV:/.env.production
Web App Attack
Anonymous
2026-07-21 11:20:03
(3 days ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
๐ณ๐ฑ
e.fierstra
2026-07-21 11:12:04
(3 days ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack