🇺🇸
mnsf
2026-09-04 18:05:31
(23 hours ago)
Scanning/Probing (15)
Brute-Force
Web App Attack
🇩🇪
FD-IX
2026-09-04 15:25:09
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇩🇪
updown.io
2026-09-04 15:01:41
(1 day ago)
{"level":"info","ts":1788534071.4683917,"logger":"http.log.access.log0","msg":"handled request","req ...
show more
{"level":"info","ts":1788534071.4683917,"logger":"http.log.access.log0","msg":"handled request","request":{"remote_ip":"34.168.94.167","remote_port":"43716","client_ip":"34.168.94.167","proto":"HTTP/1.1","method":"GET","host":"qfgh.status.updown.io","uri":"/@fs/home/ec2-user/.aws/credentials?raw??","headers":{"Accept":["text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8"],"Accept-Language":["en-US,en;q=0.9"],"Accept-Encoding":["gzip"],"User-Agent":["Mozilla/5.0 (Windows NT 11.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko; compatible; OAI-SearchBot/1.4; robots.txt; +https://openai.com/searchbot) Chrome/134.0.7453.9 Safari/537.36"]},"tls":{"resumed":true,"version":772,"cipher_suite":4865,"proto":"","server_name":"qfgh.status.updown.io","ech":false}},"bytes_read":0,"user_id":"","duration":0.00009425,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1788534071.4686666,"logger":"http.
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:18:16
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:18:10.449886 2026] [security2:error] [pid 21253:tid 21253] [client 34.168.94.167:59304] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "i-579captiger.pghsea.com"] [uri "/@fs/.env"] [unique_id "aprTIlDO3lTiKfflzjA3NgAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kivitendo.de
2026-09-04 13:27:35
(1 day ago)
[Fri Sep 04 15:26:15.216183 2026] [authz_core:error] [pid 6510:tid 6553] [client 34.168.94.167:25398 ...
show more
[Fri Sep 04 15:26:15.216183 2026] [authz_core:error] [pid 6510:tid 6553] [client 34.168.94.167:25398] AH01630: client denied by server configuration: /var/www/html/.htpasswd
[Fri Sep 04 15:27:36.469247 2026] [authz_core:error] [pid 6510:tid 6528] [client 34.168.94.167:60126] AH01630: client denied by server configuration: /var/www/html/.htpasswd
...
show less
Brute-Force
Web App Attack
🇧🇾
lns.bz
2026-09-04 12:30:48
(1 day ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 12:18:15
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 08:18:09.337109 2026] [security2:error] [pid 24894:tid 24894] [client 34.168.94.167:3024] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "title16.com"] [uri "/@fs/root/.env"] [unique_id "apq3AQfDhddt_fUQoEsD7wAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 11:55:03
(1 day ago)
crowdsecurity/CVE-2022-26134
Brute-Force
Web App Attack
2026-09-04 10:59:11
(1 day ago)
Bot / seems abusive / Apache connections: 69
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-04 10:47:05
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇬🇧
Steve
2026-09-04 10:23:57
(1 day ago)
SQL Injection Attempts
Brute-Force
SQL Injection
🇩🇪
IVski.com
2026-09-04 10:22:41
(1 day ago)
IVski WAF | Sensitive file probe - looking for exposed .env and .git config
DDoS Attack
Bad Web Bot
🇩🇪
todix
2026-09-04 09:17:23
(1 day ago)
Web App Attack Exploid from 34.168.94.167
Web App Attack
🇹🇭
thaizone.com
2026-09-04 08:35:08
(1 day ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-04 08:22:47
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.168.94.167 (167.94.168.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:22:40.978579 2026] [security2:error] [pid 16338:tid 16338] [client 34.168.94.167:47100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.surveyiowa.com"] [uri "/@fs/app/.env"] [unique_id "app_0NqYFNyP13ogtcmyqAAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
