🇮🇳
evicky2002
2026-09-09 00:01:20
UTC ·
(2 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇩🇪
BlueWire Hosting
2026-09-08 05:00:32
UTC ·
(2 months ago)
High-confidence malicious configuration/VCS probe
Web App Attack
Anonymous
2026-09-07 07:21:43
UTC ·
(2 months ago)
34.50.96.134 - - [07/Sep/2026:09:21:42 +0200] "GET /.env.local HTTP/1.1" 404 162 "-" "crusader-worker/1.0"
...
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH
🇮🇩
David Koswari
2026-09-07 07:10:00
UTC ·
(2 months ago)
REQ_BLOCKED_SECURITY
DDoS Attack
FTP Brute-Force
Ping of Death
Port Scan
Hacking
SQL Injection
Spoofing
Brute-Force
Bad Web Bot
Exploited Host
Web App Attack
SSH
IoT Targeted
🇺🇸
TPI-Abuse
2026-09-06 05:57:09
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:57:05.168411 2026] [security2:error] [pid 13881:tid 13 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:57:05.168411 2026] [security2:error] [pid 13881:tid 13881] [client 34.50.96.134:50368] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||gregmaughan.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "gregmaughan.com"] [uri "/backup.sql"] [unique_id "ap0AsT2XCkO1AKtwDgO_MQAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
FD-IX
2026-09-06 02:59:28
UTC ·
(2 months ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:58:50
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:58:47.230942 2026] [security2:error] [pid 1811:tid 181 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:58:47.230942 2026] [security2:error] [pid 1811:tid 1811] [client 34.50.96.134:33168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.panadata.com"] [uri "/.env.example"] [unique_id "apzW5yFkd9ev1mbNDlMViwAAAEo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-06 02:39:25
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:35:40
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:35:36.061070 2026] [security2:error] [pid 4683:tid 468 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:35:36.061070 2026] [security2:error] [pid 4683:tid 4683] [client 34.50.96.134:49832] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fitzcosound.com"] [uri "/.env.backup"] [unique_id "apzReMjMcWh_FJ7AvdlZjgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
creechy
2026-09-06 02:33:23
UTC ·
(2 months ago)
34.50.96.134 - - [05/Sep/2026:19:33:20 -0700] "GET /wp-config.php~ HTTP/1.1" 404 766 "-" "crusader-worker/1.0"
...
Hacking
Bad Web Bot
🇮🇪
Coolnagour
2026-09-06 02:22:01
UTC ·
(2 months ago)
http-probing: /actuator/configprops
Web App Attack
🇬🇧
consul.to
2026-09-06 02:02:24
UTC ·
(2 months ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:46:07
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:46:03.576970 2026] [security2:error] [pid 14283:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:46:03.576970 2026] [security2:error] [pid 14283:tid 14283] [client 34.50.96.134:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gate.perl-photo.com"] [uri "/.env.bak"] [unique_id "apzF2yKPzyM8W-Yqk11fQAAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
iNetWorker
2026-09-06 01:38:29
UTC ·
(2 months ago)
trolling for resource vulnerabilities
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:11:54
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:11:47.358649 2026] [security2:error] [pid 5289:tid 528 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.96.134 (134.96.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:11:47.358649 2026] [security2:error] [pid 5289:tid 5289] [client 34.50.96.134:45660] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.aspotoftea.com"] [uri "/.env.bak"] [unique_id "apy906X9ggk8KR-HpAOKbAAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack