Anonymous
2026-10-20 17:37:49
(10 minutes ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 16:56:42
(51 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.52.187.230 (230.187.52.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.52.187.230 (230.187.52.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 12:56:34.263485 2026] [security2:error] [pid 14037:tid 14037] [client 34.52.187.230:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.link"] [uri "/wp-admin/.env"] [unique_id "atedQvVnTPzZT_hzQUwoaAAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-20 16:47:35
(1 hour ago)
34.52.187.230 - - [20/Oct/2026:16:46:33 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://casares.b ...
show more
34.52.187.230 - - [20/Oct/2026:16:46:33 +0000] "GET /robots.txt HTTP/2.0" 403 118 "https://casares.blog/robots.txt" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)" "-" edge="34.52.187.230"
34.52.187.230 - - [20/Oct/2026:16:46:35 +0000] "GET /z9x8c7v6b5-debug-trigger-casares.blog HTTP/2.0" 403 16671 "https://casares.blog/z9x8c7v6b5-debug-trigger-casares.blog" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-" edge="34.52.187.230"
34.52.187.230 - - [20/Oct/2026:16:46:35 +0000] "GET /build/manifest.json HTTP/2.0" 403 16358 "https://casares.blog/build/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" "-" edge="34.52.187.230"
34.52.187.230 - - [20/Oct/2026:16:46:35 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 16358 "https://casares.blog/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, li
...
show less
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 16:43:13
(1 hour ago)
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apac ...
show more
[cb-15al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail apache-404. Example: 34.52.187.230 - - [20/Oct/2026:18:42:56 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 37975 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.52.187.230 - - [20/Oct/2026:18:42:56 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 38017 "https://casalphen.nl/.vite/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
34.52.187.230 - - [20/Oct/2026:18:42:56 +0200] "GET /build/manifest.json HTTP/2.0" 404 37872 "https://casalphen.nl/build/manifest.json" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0"
casalphen.nl:4
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 16:42:22
(1 hour ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
Anonymous
2026-10-20 16:41:07
(1 hour ago)
Banned by Fail2Ban on server
Web App Attack
๐ฉ๐ช
findlab
2026-10-20 16:25:01
(1 hour ago)
Backdrop CMS module - malicious activity detected
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 16:19:35
(1 hour ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
agenciahypelab.com.br
2026-10-20 16:18:48
(1 hour ago)
WordPress login brute-force detectado e bloqueado pelo CSF/LFD. Trigger: LF_TRIGGER
Brute-Force
SSH
๐ต๐ฑ
miriks
2026-10-20 16:15:44
(1 hour ago)
Automated scan detected: POST /graphql โ UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 ( ...
show more
Automated scan detected: POST /graphql โ UA: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36
show less
Port Scan
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-20 16:13:59
(1 hour ago)
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[mx01aln] Web exploit scanning: 2 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.52.187.230 - - [20/Oct/2026:18:13:55 +0200] "GET /build/.env HTTP/2.0" 301 486 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm)"
34.52.187.230 - - [20/Oct/2026:18:13:55 +0200] "GET /dist/.env HTTP/2.0" 301 486 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-10-20 16:10:04
(1 hour ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-20 16:09:06
(1 hour ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐ฌ๐ง
Apache
2026-10-20 16:05:56
(1 hour ago)
(mod_security) mod_security (id:210730) triggered by 34.52.187.230 (BE/Belgium/230.187.52.34.bc.goog ...
show more
(mod_security) mod_security (id:210730) triggered by 34.52.187.230 (BE/Belgium/230.187.52.34.bc.googleusercontent.com): 5 in the last 300 secs
show less
Brute-Force
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-20 15:51:02
(1 hour ago)
34.52.187.230 - - [20/Oct/2026:11:51:00 -0400] "GET /wp-admin/.env HTTP/1.1" 404 73519 "https://caro ...
show more
34.52.187.230 - - [20/Oct/2026:11:51:00 -0400] "GET /wp-admin/.env HTTP/1.1" 404 73519 "https://carolinacreativegroup.com/wp-admin/.env" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
34.52.187.230 - - [20/Oct/2026:11:51:01 -0400] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 74474 "https://carolinacreativegroup.com/@fs/src/.env?raw??" "Mozilla/5.0 (compatible; YouBot/1.0; +https://you.com/bot)"
34.52.187.230 - - [20/Oct/2026:11:51:01 -0400] "GET /.env?raw?? HTTP/1.1" 404 73514 "https://carolinacreativegroup.com/@fs/../.env?raw??" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
...
show less
Web App Attack