๐ฒ๐ฝ
octageeks.com
2026-08-28 04:26:56
(5 hours ago)
Wordpress malicious attack:[octablocked]
Web App Attack
๐ฉ๐ช
Marc
2026-08-27 21:13:31
(12 hours ago)
34.57.210.124 - - [27/Aug/2026:23:13:30 +0200] "GET /.env.example HTTP/1.1" 404 4621 "-" "crusader-w ...
show more
34.57.210.124 - - [27/Aug/2026:23:13:30 +0200] "GET /.env.example HTTP/1.1" 404 4621 "-" "crusader-worker/1.0" 34.57.210.124 - - [27/Aug/2026:23:13:30 +0200] "GET /.env.dev HTTP/1.1" 404 4621 "-" "crusader-worker/1.0" 34.57.210.124 - - [27/Aug/2026:23:13:30 +0200] "GET /env HTTP/1.1" 404 4622 "-" "crusader-worker/1.0"
show less
Brute-Force
๐ง๐พ
lns.bz
2026-08-27 19:27:37
(14 hours ago)
.env scanning [BY]
Web App Attack
๐ท๐บ
DZBOT
2026-08-27 18:19:56
(15 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 18:03:41
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 14:03:33.960250 2026] [security2:error] [pid 10780:tid 10780] [client 34.57.210.124:39778] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jr2g.com"] [uri "/wp-config.php.bak"] [unique_id "apB79V-ULhpms0ktsz1begAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 17:19:53
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 13:19:46.373030 2026] [security2:error] [pid 11704:tid 11704] [client 34.57.210.124:47802] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kmg365media.com"] [uri "/.env.production"] [unique_id "apBxsgIsZ0liApGGp7gxLAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
Celtic
2026-08-27 16:17:37
(17 hours ago)
Blocked by Fail2Ban with Jail (plesk-modsecurity)
Brute-Force
SSH
๐ซ๐ท
COMAITE
2026-08-27 15:48:10
(17 hours ago)
Suspicious URL access.
Web App Attack
Anonymous
2026-08-27 15:07:04
(18 hours ago)
Automated web scanner. Requested suspicious paths: /.env.old | /crusader-404-probe | /.env.bak | /.e ...
show more
Automated web scanner. Requested suspicious paths: /.env.old | /crusader-404-probe | /.env.bak | /.env.backup | /actuator/env | /storage/logs/laravel.log | /.env.local | /.env.production | /.env.prod | /.env.example | /.env.save | /_ignition/health-check | /.env.dev | /.env | /env, /actuator/configprops | /crusader-404-probe | /.env.bak | /.env.backup | /actuator/env | /storage/logs/laravel.log | /.env.local | /.env.production | /.env.prod | /.env.example | /.env.save | /_ignition/health-check | /.env.dev | /.env | /env. UTC: 2026-08-27 14:52:43.
show less
Web App Attack
Anonymous
2026-08-27 15:05:03
(18 hours ago)
suspicious request in access.log
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 14:53:47
(18 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.210.124 (124.210.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 10:53:41.179334 2026] [security2:error] [pid 12779:tid 12779] [client 34.57.210.124:45068] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.silent.com.ar.misterflores.com"] [uri "/.env.local"] [unique_id "apBPdbUCh3I7rxgjYYUJlAAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-08-27 14:39:58
(18 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-27 14:04:22
(19 hours ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-27 13:25:01
(20 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-08-27 13:20:27
(20 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking