๐ง๐ท
SOC-BR
2026-08-28 07:20:19
(1 hour ago)
Attack detected by Fortinet - applications3: Spring.Boot.Actuator.Unauthorized.Access - 2026-08-27 1 ...
show more
Attack detected by Fortinet - applications3: Spring.Boot.Actuator.Unauthorized.Access - 2026-08-27 18:39:42 - Source Port 42612
show less
Port Scan
Hacking
๐บ๐ธ
kosada.com
2026-08-27 22:22:44
(10 hours ago)
Web vulnerability probing: /.env.local (bogus vhost/SNI)
Web App Attack
๐ง๐ท
Peregrine
2026-08-27 21:59:09
(11 hours ago)
Fail2Ban Jail s2: tomcat-404 | Evidence: - 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /actua ...
show more
Fail2Ban Jail s2: tomcat-404 | Evidence: - 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /actuator/env HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /env HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /actuator/configprops HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /crusader-404-probe HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /storage/logs/laravel.log HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /_ignition/health-check HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /wp-config.php~ HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /wp-config.php.bak HTTP/1.1" 404 414
- 34.19.250.29 - - [27/Aug/2026:18:59:01 -0300] "GET /wp-config.php.swp HTTP/1.1" 404 414
show less
Bad Web Bot
Web App Attack
๐ฎ๐ช
AutosOnShow
2026-08-27 21:57:04
(11 hours ago)
blocked for webapp attack | path requested: / | seen at 2026-08-27 21:56:30.805 |
Web App Attack
Anonymous
2026-08-27 19:27:04
(13 hours ago)
34.19.250.29 - - [27/Aug/2026:19:27:03 +0000] "GET /.env.production HTTP/1.1" 404 162 "-" "crusader- ...
show more
34.19.250.29 - - [27/Aug/2026:19:27:03 +0000] "GET /.env.production HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
34.19.250.29 - - [27/Aug/2026:19:27:03 +0000] "GET /.env.example HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
...
show less
Web App Attack
๐บ๐ธ
CBJ
2026-08-27 19:14:15
(14 hours ago)
fail2ban: apache-filepath-recon
...
Web App Attack
๐ฉ๐ช
todix
2026-08-27 15:34:21
(17 hours ago)
Web App Attack Exploid from 34.19.250.29
Web App Attack
๐บ๐ธ
aks4226
2026-08-27 15:12:11
(18 hours ago)
Bot search, attacking common web applications.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 13:39:20
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.250.29 (29.250.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.250.29 (29.250.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:39:17.800141 2026] [security2:error] [pid 2278205:tid 2278247] [client 34.19.250.29:45658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jazzzcatz.prismatik.com"] [uri "/.env"] [unique_id "apA-BeKMkSny_ZVB3hcMcAAAAYY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 11:51:41
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.250.29 (29.250.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.250.29 (29.250.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:51:33.416370 2026] [security2:error] [pid 12050:tid 12055] [client 34.19.250.29:39382] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.my-drug-store.kylight.com"] [uri "/.env.prod"] [unique_id "apAkxVOwhuhMkNEqvH5NYgAAAQI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-27 11:47:57
(21 hours ago)
[Thu Aug 27 13:47:56.608488 2026] [access_compat:error] [pid 1825951:tid 132753228011200] [client 34 ...
show more
[Thu Aug 27 13:47:56.608488 2026] [access_compat:error] [pid 1825951:tid 132753228011200] [client 34.19.250.29:41466] AH01797: client denied by server configuration: /var/www/html/storage
[Thu Aug 27 13:47:56.609003 2026] [access_compat:error] [pid 1825951:tid 132753253189312] [client 34.19.250.29:41452] AH01797: client denied by server configuration: /var/www/html/actuator
[Thu Aug 27 13:47:56.609395 2026] [access_compat:error] [pid 1799075:tid 132751994906304] [client 34.19.250.29:41386] AH01797: client denied by server configuration: /var/www/html/.env.dev
[Thu Aug 27 13:47:56.612348 2026] [access_compat:error] [pid 1825951:tid 132753102186176] [client 34.19.250.29:41432] AH01797: client denied by server configuration: /var/www/html/wp-config.php~
[Thu Aug 27 13:47:56.612741 2026] [access_compat:error] [pid 1825891:tid 132753328690880] [client 34.19.250.29:41376] AH01797: client denied by server configuration: /var/www/html/crusader-404-probe
[Thu Aug 27 13:47:56.613702 2026] [acces
...
show less
Brute-Force
Web App Attack
๐ฉ๐ช
todix
2026-08-27 11:34:15
(21 hours ago)
WebAttack or semilar from 34.19.250.29
Web App Attack
๐ณ๐ฑ
debestelapp
2026-08-27 10:55:06
(22 hours ago)
Web App Attack
Anonymous
2026-08-27 09:53:18
(23 hours ago)
34.19.250.29 - - [27/Aug/2026:11:53:18 +0200] "GET /. HTTP/1.1" 301 169 "-" "crusader-worker/1.0"
Web App Attack
๐ซ๐ฎ
paissangroup
2026-08-27 08:39:33
(1 day ago)
Multiple WAF Violations
Web App Attack