🇨🇭
zynex
2026-09-01 11:09:34
(1 day ago)
URL Probing: /wp-config.php.bak
Web App Attack
2026-09-01 11:08:26
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.175.205.240 (ES/Spain/240.205.175.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.175.205.240 (ES/Spain/240.205.175.34.bc.googleusercontent.com)
show less
SQL Injection
🇱🇻
garmtech.com
2026-09-01 11:04:46
(1 day ago)
Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized p ...
show more
Attempted access to sensitive endpoint (/.env.production) detected. Automated scan or unauthorized probing.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:54:55
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:54:51.547064 2026] [security2:error] [pid 17222:tid 17222] [client 34.175.205.240:44880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "peterjohnsonauthor.com"] [uri "/.env"] [unique_id "apau-6Lvc8qflXkcbKszHQAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:23:07
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:23:02.151549 2026] [security2:error] [pid 18384:tid 18397] [client 34.175.205.240:51618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "accrediteddegree.aafm.us"] [uri "/.env.save"] [unique_id "apanho2cWXFxcFZVhtXWdgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-01 09:55:51
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇳🇱
javierin
2026-09-01 09:42:31
(1 day ago)
34.175.205.240 - smtp.javierin.com - - [01/Sep/2026:09:42:30 +0000] "GET /storage/logs/laravel.log H ...
show more
34.175.205.240 - smtp.javierin.com - - [01/Sep/2026:09:42:30 +0000] "GET /storage/logs/laravel.log HTTP/1.1" 404 7362 "-" "crusader-worker/1.0"
34.175.205.240 - smtp.javierin.com - - [01/Sep/2026:09:42:30 +0000] "GET /wp-config.php.swp HTTP/1.1" 404 7362 "-" "crusader-worker/1.0"
...
show less
Web App Attack
Hacking
🇧🇾
lns.bz
2026-09-01 09:30:52
(1 day ago)
.env scanning [BY]
Web App Attack
🇩🇪
raph
2026-09-01 08:33:53
(1 day ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇮🇹
LTM
2026-09-01 06:20:01
(1 day ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:07:59
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.205.240 (240.205.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:07:52.193491 2026] [security2:error] [pid 20084:tid 20126] [client 34.175.205.240:40660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.boraozbek.com"] [uri "/.env.save"] [unique_id "apZruOlg42CGBgLAd2WjwwAAAMg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 05:35:02
(1 day ago)
suspicious request in access.log
Web App Attack
🇦🇺
2000cn.com.au
2026-09-01 05:09:59
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-09-01 04:56:10
(1 day ago)
34.175.205.240 detected and blocked by apache-modsecurity after 1 try
Brute-Force
2026-09-01 04:31:20
(1 day ago)
Trying to access config files
Web App Attack