|
🇫🇷
service Informatique
|
|
GET /wp-config
|
Web App Attack
|
|
🇩🇪
ghostwarriors
|
|
Attempts against non-existent wp-login
|
Brute-Force
Web App Attack
|
|
🇩🇪
yitzhaq
|
|
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4503 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4504 "-" "crusader-worker/1.0"
34.48.124.151 - - [22 ...
show more
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /wp-config.php~ HTTP/1.1" 404 4503 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /wp-config.php.bak HTTP/1.1" 404 4504 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /storage/logs/laravel.log HTTP/1.1" 404 4503 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /.env HTTP/1.1" 404 4503 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /.env.old HTTP/1.1" 404 4502 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /wp-config.php.swp HTTP/1.1" 404 4502 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /.env.example HTTP/1.1" 404 4503 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /actuator/configprops HTTP/1.1" 404 4502 "-" "crusader-worker/1.0"
34.48.124.151 - - [22/Sep/2026:19:07:13 +0200] "GET /.env.backup HTTP/1.1" 404 4502 "-" "cru
show less
|
Web App Attack
Brute-Force
|
|
🇳🇱
WeCloudit-Anti-Abuse
|
|
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
|
Web App Attack
Hacking
|
|
🇳🇱
enpepet
|
|
GENERAL: parametres: [url:env=] UA:crusader-worker/1.0 URL:/.env.old
|
Port Scan
Hacking
Brute-Force
Bad Web Bot
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:41:07.909226 2026] [security2:error] [pid 20648:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:41:07.909226 2026] [security2:error] [pid 20648:tid 20648] [client 34.48.124.151:48572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nowell.net"] [uri "/.env.example"] [unique_id "arKhkwMEtI_00c5kN1EQFgAAAC8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇩🇪
wpadm4
|
|
(wordpress) Failed login wp-login.php or xmlrpc.php
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:49:55.406551 2026] [security2:error] [pid 12562:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:49:55.406551 2026] [security2:error] [pid 12562:tid 12562] [client 34.48.124.151:37058] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.jeffreylowenstein.com"] [uri "/wp-config.php.bak"] [unique_id "arKVk-HxBI-onQqB5rn6LAAAAAM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇫🇮
paissangroup
|
|
Multiple WAF Violations
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:15:44.836559 2026] [security2:error] [pid 23898:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:15:44.836559 2026] [security2:error] [pid 23898:tid 23898] [client 34.48.124.151:41770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "katisfaction.dannyvanrijswijk.com"] [uri "/.env.save"] [unique_id "arKNkJDg72QBt3HRvjPfHQAAAAY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇧🇷
Halux
|
|
34.48.124.151 Probing protected path or service
|
Web App Attack
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:50:37.807296 2026] [security2:error] [pid 22031:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:50:37.807296 2026] [security2:error] [pid 22031:tid 22031] [client 34.48.124.151:58122] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "iberhome.net"] [uri "/.env.bak"] [unique_id "arKHrZtiYDC0IkHC-plaIQAAAA8"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
🇳🇱
Alt255
|
|
[ti-04al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.48.124.151 - - [22/Sep/2026:15:14:10 +0200] "GET /.env.production HTTP/1.1" 403 6292 "-" "crusader-worker/1.0"
...
|
Bad Web Bot
Web App Attack
|
|
🇺🇸
dtorrer
|
|
General vulnerability scan.
|
Port Scan
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:47:44.916193 2026] [security2:error] [pid 16297:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.124.151 (151.124.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 08:47:44.916193 2026] [security2:error] [pid 16297:tid 16297] [client 34.48.124.151:43464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "emilybaotrannguyen.com"] [uri "/.env.example"] [unique_id "arJ48AwKKx-4TAcsuxv96gAAACI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|