🇩🇪
on-com
2026-09-01 10:03:24
(38 minutes ago)
URL scan
Brute-Force
Web App Attack
🇫🇷
masterguru
2026-09-01 10:00:02
(41 minutes ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:56:15
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:56:10.029263 2026] [security2:error] [pid 31415:tid 31415] [client 34.22.99.193:59020] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ryzezito.com"] [uri "/wp-config.php.bak"] [unique_id "apaTKv__ZvbtT8JbsvSPggAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:50:03
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:49:58.040596 2026] [security2:error] [pid 32410:tid 32410] [client 34.22.99.193:42920] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.cdromline.com"] [uri "/.env.prod"] [unique_id "apaDpslgY0J6BArIjRlawQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-09-01 07:28:00
(3 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇦🇺
2000cn.com.au
2026-09-01 07:21:50
(3 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇰🇷
eungyeol15
2026-09-01 07:15:11
(3 hours ago)
[daon] Web scan/abuse: 1 events (web_probe). paths: GET /.env.bak -> 404. sample: 34.22.99.193 - - [ ...
show more
[daon] Web scan/abuse: 1 events (web_probe). paths: GET /.env.bak -> 404. sample: 34.22.99.193 - - [01/Sep/2026:16:15:11 +0900] "GET /.env.bak HTTP/1.1" 404 207 "-" "crusader-worker/1.0"
show less
Web App Attack
Hacking
🇿🇦
simon boshoff
2026-09-01 07:07:10
(3 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇳🇱
MyGlobalFlowers
2026-09-01 06:11:17
(4 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 06:02:45
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 02:02:39.196992 2026] [security2:error] [pid 7681:tid 7681] [client 34.22.99.193:58444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.oligofoundry.com"] [uri "/.env"] [unique_id "apZqf3rX8YW7B5Z9JM_KRgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-01 05:26:35
(5 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-01 05:23:32
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.22.99.193 (193.99.22.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:23:28.480839 2026] [security2:error] [pid 226456:tid 226580] [client 34.22.99.193:35118] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "evan-hotel.com"] [uri "/.env.local"] [unique_id "apZhUCrdEraH6Tx-Bu-DZwAAAQk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ALPHANET
2026-09-01 05:23:15
(5 hours ago)
web exploits
Hacking
Exploited Host
Web App Attack
🇷🇴
clauss
2026-09-01 05:18:06
(5 hours ago)
34.22.99.193 - - [01/Sep/2026:08:18:06 +0300] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "crusade ...
show more
34.22.99.193 - - [01/Sep/2026:08:18:06 +0300] "GET /wp-config.php.bak HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
34.22.99.193 - - [01/Sep/2026:08:18:06 +0300] "GET /wp-config.php~ HTTP/1.1" 403 146 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇺🇸
mnsf
2026-09-01 05:06:24
(5 hours ago)
Scanning/Probing (20)
Brute-Force
Web App Attack