🇨🇦
polycoda
2026-09-01 15:25:51
(20 hours ago)
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: 🎯 Vulnerability Scanner (Non Decay-Based) - ⚙️ Configuration File Access (Non Decay-Based) - ❌ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-01 13:03:29
(23 hours ago)
[01/Sep/2026:16:03:28 +0300] -- 34.185.169.208 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp- ...
show more
[01/Sep/2026:16:03:28 +0300] -- 34.185.169.208 Ban reason: Scanner [CMS_GENERIC] | Request: GET /wp-config.php.swp HTTP/1.1
show less
Bad Web Bot
Web App Attack
2026-09-01 12:58:19
(23 hours ago)
Blocked by ModSec and CSF
Port Scan
🇮🇩
Burayot
2026-09-01 12:50:10
(23 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.185.169.208 (DE/Germany/208.169. ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.185.169.208 (DE/Germany/208.169.185.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 12:23:35
(23 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:949110) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:23:27.856052 2026] [security2:error] [pid 4027:tid 4027] [client 34.185.169.208:45616] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "saniyadenton.click"] [uri "/.env.backup"] [unique_id "apbDv1F8Gg8Kt_lMnuh65AAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 12:04:42
(1 day ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
2026-09-01 11:10:39
(1 day ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
🇩🇪
FD-IX
2026-09-01 11:01:10
(1 day ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
2026-09-01 10:50:01
(1 day ago)
suspicious request in access.log
Web App Attack
🇩🇪
ITSNF
2026-09-01 09:40:04
(1 day ago)
Blocked by os-abuseipdb; 76 hits, proto=tcp, ports=443,80
Port Scan
Hacking
🇺🇸
TPI-Abuse
2026-09-01 07:46:12
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:46:05.408221 2026] [security2:error] [pid 32754:tid 32754] [client 34.185.169.208:37704] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis-castle.com"] [uri "/.env.production"] [unique_id "apaCvQr_upvaAPECuK9RYAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-01 06:53:57
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
pscriptos
2026-09-01 06:29:02
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-01 04:37:58
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.185.169.208 (208.169.185.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:37:50.358079 2026] [security2:error] [pid 8790:tid 8790] [client 34.185.169.208:50460] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.leevardaman.com"] [uri "/.env.bak"] [unique_id "apZWnrTFYlAmOVPdgEr2TgAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 04:14:14
(1 day ago)
[osotir.org] httpd-config-scan: sites=www.vivliopoleio-lyxnos.gr; logs=/var/log/httpd/domains/vivlio ...
show more
[osotir.org] httpd-config-scan: sites=www.vivliopoleio-lyxnos.gr; logs=/var/log/httpd/domains/vivliopoleio-lyxnos.gr.log; samples=/wp-config.php~ | /.env | /.env.save
show less
Hacking
Web App Attack