🇪🇸
Gem
2026-09-04 22:11:47
UTC ·
(2 months ago)
Unauthorized web scan.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:13:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:13:07.850202 2026] [security2:error] [pid 3859:tid 385 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:13:07.850202 2026] [security2:error] [pid 3859:tid 3859] [client 34.52.133.23:33474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.portcitybluessociety.com"] [uri "/.env.bak"] [unique_id "aprR88qM37fC8zcG8nOvNgAAAGQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
2000cn.com.au
2026-09-04 13:30:14
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-04 11:29:55
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:29:48.317097 2026] [security2:error] [pid 24457:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:29:48.317097 2026] [security2:error] [pid 24457:tid 24457] [client 34.52.133.23:42734] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thoughtworm.com"] [uri "/wp-config.php.bak"] [unique_id "apqrrEVdSh4_8260__VrBgAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-04 11:22:52
UTC ·
(2 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack
Anonymous
2026-09-04 11:05:03
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
🇭🇺
miszterx.hu
2026-09-04 11:03:08
UTC ·
(2 months ago)
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:45:10
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:45:02.487575 2026] [security2:error] [pid 30838:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:45:02.487575 2026] [security2:error] [pid 30838:tid 30838] [client 34.52.133.23:44334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lakesidecountrycloggers.com.joshuashands.org"] [uri "/.env"] [unique_id "apqhLlgvLwM0toY2J3MyHgAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
ca
2026-09-04 10:20:00
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-04 10:16:53
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:16:47.236441 2026] [security2:error] [pid 15540:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:16:47.236441 2026] [security2:error] [pid 15540:tid 15540] [client 34.52.133.23:35996] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pattifox.com"] [uri "/wp-config.php.swp"] [unique_id "apqaj0FFoFKu3vVoATPKvQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-09-04 08:28:15
UTC ·
(2 months ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:18:16
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:18:12.419238 2026] [security2:error] [pid 27321:tid 27 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.133.23 (23.133.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:18:12.419238 2026] [security2:error] [pid 27321:tid 27321] [client 34.52.133.23:41064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.canarysuites.com"] [uri "/.env.backup"] [unique_id "app-xKOzFUsGVrup8hs3zQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
NewGastroline
2026-09-04 07:43:38
UTC ·
(2 months ago)
Malicious request blocked by CrowdSec on gastro-prod1.boreus.de
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-04 07:05:10
UTC ·
(2 months ago)
Web App Attack
🇫🇷
dynamix
2026-09-04 07:02:58
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack