๐ฉ๐ช
IVski.com
2026-10-14 01:21:17
(4 days ago)
IVski WAF | WordPress scanner detected - probing wp-content, xmlrpc or wp-login
Hacking
Brute-Force
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-13 22:19:41
(4 days ago)
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 01:13:01
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.62.81.127 (127.81.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.81.127 (127.81.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:12:54.772756 2026] [security2:error] [pid 29644:tid 29644] [client 34.62.81.127:43774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "es.laboquimia.es"] [uri "/.env.supabase"] [unique_id "as2FlhawnmRNy2NvN1-pBQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-13 00:31:05
(5 days ago)
34.62.81.127 - - [13/Oct/2026:00:30:42 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+ ...
show more
34.62.81.127 - - [13/Oct/2026:00:30:42 +0000] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 10035 "-" rt="0.214" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-" h="docs.robotstxt.es" sn="docs.robotstxt.es" ru="/cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input" u="/index.php" ucs="-" ua="unix:/var/run/php/docs82.sock" us="404" uct="0.000" urt="0.213"
34.62.81.127 - - [13/Oct/2026:00:30:42 +0000] "POST /cgi-bin/php?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 404 10035 "-" rt="0.146" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1; +http://www.apple.com/go/applebot)" "-" h="docs.robotstxt.es" sn="docs.robotstxt.es" ru="/cgi-bin/php?%ADd+allow_url_include%3d1+%
...
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-10-12 23:51:21
(5 days ago)
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/ ...
show more
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /static/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /resources/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /%2e%2e/.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:23:51:18 +0000] "GET /..%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.62.81.127"
...
show less
Web Spam
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-12 22:19:00
(5 days ago)
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-12 21:49:33
(5 days ago)
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 147 "-" "Mozil ...
show more
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.vite/manifest.json HTTP/2.0" 403 147 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 Edg/153.0.0.0" "-"
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.vault-token HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "-"
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.pgpass HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" "-"
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.env.testing HTTP/2.0" 403 189 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )" "-"
34.62.81.127 - - [12/Oct/2026:21:49:14 +0000] "GET /.azure/accessTokens.json HTTP/2.0" 403 189 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +h
...
show less
Web App Attack
๐ฎ๐ช
tarlabs
2026-10-12 17:32:38
(5 days ago)
IP banned by Fail2Ban (traefik-404 jail)
Web App Attack
Anonymous
2026-10-12 17:08:07
(5 days ago)
IP matched detection query Detection of too many failed responses.
Brute-Force
Bad Web Bot
Hacking
Anonymous
2026-10-12 16:45:53
(5 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
๐ช๐ธ
robotstxt
2026-10-12 16:36:51
(5 days ago)
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.1 ...
show more
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
34.62.81.127 - - [12/Oct/2026:16:36:00 +0000] "-" 400 193 "-" "-" "-" edge="34.62.81.127"
...
show less
Web Spam
Web App Attack
๐ฉ๐ช
Vegascosmetics
2026-10-12 16:24:58
(5 days ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after matched multi-pattern attack signatur ...
show more
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after matched multi-pattern attack signature. Evidence: AttackPattern: /\.vite/ (Match: /.vite/)
show less
Hacking
Web App Attack
๐ฉ๐ช
yvoictra
2026-10-12 16:19:39
(5 days ago)
Bloqueado automรกticamente por CrowdSec. Escenario: crowdsecurity/http-sensitive-files
Web App Attack
๐ณ๐ฑ
Savvii
2026-10-12 16:07:41
(5 days ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-12 16:00:00
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.62.81.127 (127.81.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.81.127 (127.81.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 11:59:56.445207 2026] [security2:error] [pid 28981:tid 28981] [client 34.62.81.127:44568] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tand.es"] [uri "/.env.development"] [unique_id "as0D_CeDACjTtAMPP-SKKQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack