🇫🇷
masterguru
2026-08-29 03:45:23
(1 day ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
🇩🇪
Skyrider
2026-08-29 03:44:18
(1 day ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-08-29 03:31:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.57.44.131 (131.44.57.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.57.44.131 (131.44.57.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:31:44.176919 2026] [security2:error] [pid 23800:tid 23800] [client 34.57.44.131:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nyemdr.org"] [uri "/.env.backup"] [unique_id "apJSoAnEaLKYuFhbiPKwiAAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇺
Mga Admin
2026-08-29 02:40:13
(1 day ago)
34.57.44.131 - - [29/Aug/2026:09:40:13 +0700] "GET /.env.local HTTP/1.1" 404 69 "-" "crusader-worker ...
show more
34.57.44.131 - - [29/Aug/2026:09:40:13 +0700] "GET /.env.local HTTP/1.1" 404 69 "-" "crusader-worker/1.0"
...
show less
Web App Attack
🇺🇸
oralunal
2026-08-29 02:23:42
(1 day ago)
IP banned by Fail2Ban in jail ah-suss access.log mvfnds
...
Bad Web Bot
Web App Attack
🇩🇪
AetherFox
2026-08-29 01:41:08
(1 day ago)
AetherFox VoidGuard detected: [Sat Aug 29 01:41:07.266212 2026] [authz_core:error] [pid 3863242:tid ...
show more
AetherFox VoidGuard detected: [Sat Aug 29 01:41:07.266212 2026] [authz_core:error] [pid 3863242:tid 3863245] [client 34.57.44.131:38598] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.dev
[Sat Aug 29 01:41:07.266367 2026] [authz_core:error] [pid 3863243:tid 3863296] [client 34.57.44.131:38514] AH01630: client denied by server configuration: proxy:https://[MASKED]/.env.bak
[Sat Aug 29 01:41:07.267005 2026] [authz_core:error] [pid 3863242:tid 3863254] [client 34.57.44.131:38478] AH01630: client denied by server configuration: proxy:https://[MASKED]/wp-config.php~
[Sat Aug 29 01:41:07.268401 2026] [authz_core:error] [pid 3863242:tid 3863250] [client 34.57.44.131:38532] AH01630: client denied by server configuration: proxy:https://[MASKED]/_ignition/health-check
[Sat Aug 29 01:41:07.268466 2026] [authz_core:error] [pid 3863243:tid 3863258] [client 34.57.44.131:38464] AH01630: client denied by server configuration: proxy:https://5
...
show less
Bad Web Bot
Web App Attack
🇩🇪
Viveronese
2026-08-28 23:38:41
(1 day ago)
HTTP vulnerability scanning
Web App Attack
Anonymous
2026-08-28 22:37:32
(1 day ago)
(mod_security) mod_security triggered on hostname [redacted] 34.57.44.131 (US/United States/131.44.5 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.57.44.131 (US/United States/131.44.57.34.bc.googleusercontent.com)
show less
SQL Injection
🇳🇱
e.fierstra
2026-08-28 21:57:57
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇹
mediarama.com
2026-08-28 21:24:03
(1 day ago)
Banned by Fail2Ban
Web App Attack
🇸🇪
vaia.cloud
2026-08-28 21:05:02
(1 day ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
omartin
2026-08-28 20:37:08
(1 day ago)
Critical Vulnerability Scan detected
Hacking
Brute-Force
Exploited Host
Web App Attack
🇮🇹
CoreTech srl
2026-08-28 19:33:57
(1 day ago)
cloudlinux2 fail2ban: 2026-08-28 21:28:47,844 fail2ban.filter [1478]: INFO [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-08-28 21:28:47,844 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,826 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,870 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,837 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,796 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,901 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cloudlinux2 fail2ban: 2026-08-28 21:28:47,916 fail2ban.filter [1478]: INFO [plesk-modsecurity] Found 34.57.44.131 - 2026-08-28 21:28:47cl
show less
Brute-Force
🇺🇸
rsa
2026-08-28 19:08:00
(1 day ago)
GET /.env.prod HTTP/1.1
DDoS Attack
Brute-Force
Exploited Host
Web App Attack
Hacking
🇺🇸
wteiken
2026-08-28 17:51:58
(1 day ago)
2026-08-28T13:51:57.218081-04:00 nostromo.teiken.net kernel: [55727.168299] syn_limit:IN=en-wan OUT= ...
show more
2026-08-28T13:51:57.218081-04:00 nostromo.teiken.net kernel: [55727.168299] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.57.44.131 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=5154 DF PROTO=TCP SPT=45110 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-08-28T13:51:57.218565-04:00 nostromo.teiken.net kernel: [55727.168439] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.57.44.131 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=9854 DF PROTO=TCP SPT=45092 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-08-28T13:51:57.218677-04:00 nostromo.teiken.net kernel: [55727.168593] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:1c:98:0c:08:00 SRC=34.57.44.131 DST=173.52.106.128 LEN=60 TOS=0x00 PREC=0x60 TTL=61 ID=18627 DF PROTO=TCP SPT=45134 DPT=443 WINDOW=65320 RES=0x00 SYN URGP=0
2026-08-28T13:51:57.218770-04:00 nostromo.teiken.net kernel: [55727.168905] syn_limit:IN=en-wan OUT= MAC=00:50:43:37:c2:00:88:a2:5e:
...
show less
Port Scan