🇫🇷
masterguru
2026-10-14 02:05:48
UTC ·
(3 weeks ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
🇩🇪
mbch
2026-10-14 01:30:53
UTC ·
(3 weeks ago)
Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-14T01:30:53.787000+00:00 to 2026-10-14T01:30:54.344000+00:00: 10 distinct paths in 0.557s, denied HTTP 404. Trusted client-IP processing; forw ...
show more
Observed automated probing of web application/configuration paths over completed HTTP requests. UTC 2026-10-14T01:30:53.787000+00:00 to 2026-10-14T01:30:54.344000+00:00: 10 distinct paths in 0.557s, denied HTTP 404. Trusted client-IP processing; forwarding headers accepted only from official configured Cloudflare networks. No successful compromise established. Examples: /build/manifest.json, /.vite/manifest.json, /dist/manifest.json, /dist/.vite/manifest.json, /api/.env, /build/.env, /src/.env, /core/.env, /docker/.env, /backend/.env. MediaBurg website operations.
show less
Web App Attack
🇺🇸
Mundo Bueno
2026-10-14 01:08:42
UTC ·
(3 weeks ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env.production.local [RATE LIMITED - 1800s quarantine] | Pays: DE | UA: Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webma
Hacking
Web App Attack
🇸🇬
naveeddaros
2026-10-14 00:52:05
UTC ·
(3 weeks ago)
HTTP Flood DDoS attack detected
Brute-Force
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-13 23:43:31
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210730) triggered by 34.40.48.232 (232.48.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:43:26.046055 2026] [security2:error] [pid 18137:tid 18 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.40.48.232 (232.48.40.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:43:26.046055 2026] [security2:error] [pid 18137:tid 18137] [client 34.40.48.232:58964] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||axiomcommercial.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "axiomcommercial.com"] [uri "/z9x8c7v6b5-debug-trigger-axiomcommercial.com"] [unique_id "as7CHoqfL5w5GCrcPJVPmgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
robotstxt
2026-10-13 22:49:39
UTC ·
(3 weeks ago)
34.40.48.232 - - [13/Oct/2026:22:48:38 +0000] "GET /robots.txt HTTP/2.0" 403 227 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="34.40.48.232"
34.40.48.232 - - [13/Oct/2026:22:48:39 +0000] "GET /dist/manifest.json HTTP ...
show more
34.40.48.232 - - [13/Oct/2026:22:48:38 +0000] "GET /robots.txt HTTP/2.0" 403 227 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)" "-" edge="34.40.48.232"
34.40.48.232 - - [13/Oct/2026:22:48:39 +0000] "GET /dist/manifest.json HTTP/2.0" 403 1972 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-" edge="34.40.48.232"
34.40.48.232 - - [13/Oct/2026:22:48:39 +0000] "GET /webpack-stats.json HTTP/2.0" 403 1972 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-" edge="34.40.48.232"
34.40.48.232 - - [13/Oct/2026:22:48:40 +0000] "GET /static/manifest.json HTTP/2.0" 403 1973 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Mobile Safari/537.36" "-" edge="34.40.48.232"
34.40.48.232 - - [13/Oct/2026:22:48:40 +0000] "GET /z9x8c7v6b5-debug-trigger-nworkshop.org HTTP/2.0" 403 2133 "-" "Mozilla/5.0
...
show less
Web App Attack
Anonymous
2026-10-13 22:21:39
UTC ·
(3 weeks ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
🇬🇧
consul.to
2026-10-13 20:23:22
UTC ·
(3 weeks ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Aetherweb Ark
2026-10-13 20:17:39
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:949110) triggered by 34.40.48.232 (DE/Germany/232.48.40.34.bc.googleusercontent.com): N in the last X secs
Web App Attack
🇷🇴
clauss
2026-10-13 19:29:54
UTC ·
(3 weeks ago)
34.40.48.232 - - [13/Oct/2026:22:29:54 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.40.48.232 - - [13/Oct/2026:22:29:54 +0 ...
show more
34.40.48.232 - - [13/Oct/2026:22:29:54 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.40.48.232 - - [13/Oct/2026:22:29:54 +0300] "GET /firebase-adminsdk.json HTTP/2.0" 404 11818 "https://eusymphonyorchestra.eu/firebase-adminsdk.json" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
🇳🇱
ConsulHosting
2026-10-13 19:06:57
UTC ·
(3 weeks ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇩🇪
Lino Project
2026-10-13 18:57:00
UTC ·
(3 weeks ago)
34.40.48.232 - - [13/Oct/2026:20:56:56 +0200] "GET /.github/workflows/deploy.yml HTTP/2.0" 403 69 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
...
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-13 17:45:03
UTC ·
(3 weeks ago)
344 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
🇳🇱
Alt255
2026-10-13 16:30:18
UTC ·
(3 weeks ago)
[ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.40.48.232 - - [13/Oct/2026:18:30:06 +0200] "GET /2q6uhw7nqojq69gz14q8 HTTP/2.0" 404 1856 "-" "Mozilla/5.0 (compatible; KimiBot/1.0 ...
show more
[ti-11al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.40.48.232 - - [13/Oct/2026:18:30:06 +0200] "GET /2q6uhw7nqojq69gz14q8 HTTP/2.0" 404 1856 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.40.48.232 - - [13/Oct/2026:18:30:06 +0200] "GET /z9x8c7v6b5-debug-trigger-peenenuien.nl HTTP/2.0" 404 1856 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)"
34.40.48.232 - - [13/Oct/2026:18:30:06 +0200] "POST /login HTTP/2.0" 404 1856 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
34.40.48.232 - - [13/Oct/2026:18:30:06 +0200] "POST /graphql HTTP/2.0" 404 1856 "https://peenenuien.nl" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
0011.
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-13 15:39:43
UTC ·
(3 weeks ago)
Excessive multi-domain requests
Brute-Force