🇧🇾
lns.bz
2026-09-03 16:38:55
(6 hours ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
debestelapp
2026-09-03 15:15:10
(8 hours ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 13:11:24
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 09:11:19.713406 2026] [security2:error] [pid 18836:tid 18836] [client 34.51.199.243:33690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qyzaco.com"] [uri "/.git/config"] [unique_id "aplx9zfgpC1d7QlMdhaoWwAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-03 12:55:23
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-09-03 10:19:26
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 06:19:20.270894 2026] [security2:error] [pid 11232:tid 11232] [client 34.51.199.243:59234] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qxz.cc"] [uri "/.git/config"] [unique_id "aplJqJ6cBz_Z5F_G5X2nbAAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-03 06:58:40
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.51.199.243 (243.199.51.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 02:58:33.233230 2026] [security2:error] [pid 591:tid 591] [client 34.51.199.243:38746] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qwik-wash.com"] [uri "/.git/config"] [unique_id "apkameOnIReFzu6KfdPKUgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-03 04:28:11
(18 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇬🇧
OptimusGO
2026-09-02 22:58:18
(1 day ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Time ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-09-02 23:58:18 UTC
Log evidence:
34.51.199.243 - - [02/Sep/2026:23:58:05 +0100] "GET /src/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.51.199.243 - - [02/Sep/2026:23:58:05 +0100] "GET /core/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.51.199.243 - - [02/Sep/2026:23:58:05 +0100] "GET /core/app/.env HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Port Scan
Brute-Force
🇳🇱
Site.eu
2026-09-02 22:52:22
(1 day ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
mravb
2026-09-02 22:25:18
(1 day ago)
34.51.199.243 - - [03/Sep/2026:01:25:18 +0300] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 ...
show more
34.51.199.243 - - [03/Sep/2026:01:25:18 +0300] "GET /.git/config HTTP/1.1" 404 150 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Hacking
🇫🇷
dynamix
2026-09-02 21:08:33
(1 day ago)
Multiple WAF Violations
Web App Attack
2026-09-02 21:00:02
(1 day ago)
suspicious request in access.log
Web App Attack
2026-09-02 19:42:27
(1 day ago)
Bloqueado automaticamente por CrowdSec escenario crowdsecurity/http-sensitive-files
Brute-Force
🇫🇷
Octopuce
2026-09-02 19:27:57
(1 day ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇸🇪
vaia.cloud
2026-09-02 19:00:06
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack