๐ซ๐ฎ
inlink.ltd
2026-08-29 03:13:51
(1 hour ago)
dot file probe
Web App Attack
๐น๐ผ
kk_it_man
2026-08-29 03:13:03
(1 hour ago)
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Tilde in URI - potential .php~ ...
show more
ET INFO Request to Hidden Environment File - Inbound
ET WEB_SERVER Tilde in URI - potential .php~ source disclosure vulnerability
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-08-29 03:10:10
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 23:10:03.755517 2026] [security2:error] [pid 18802:tid 18802] [client 34.71.230.61:36544] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.notariaarauco.tecnoconce.com"] [uri "/wp-config.php.bak"] [unique_id "apJNi1qbKQ3uoTRBn8omEgAAACs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
polycoda
2026-08-29 02:13:01
(2 hours ago)
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based ...
show more
AutoBlock: ๐ฏ Vulnerability Scanner (Non Decay-Based) - โ๏ธ Configuration File Access (Non Decay-Based) - โ Excessive 40X Errors (Decay-Based)
show less
Hacking
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-08-29 02:09:21
(2 hours ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 01:35:18
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 21:35:11.008314 2026] [security2:error] [pid 9392:tid 9392] [client 34.71.230.61:50260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "k0cgy.net"] [uri "/.env.backup"] [unique_id "apI3T9qpZFlz1obto5QK-QAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
4server
2026-08-29 01:24:56
(2 hours ago)
[SatAug2903:24:53.6462842026][security2:error][pid3426811:tid3426867][client34.71.230.61:0]ModSecuri ...
show more
[SatAug2903:24:53.6462842026][security2:error][pid3426811:tid3426867][client34.71.230.61:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"sisuconsulting.net\"][uri\"/wp-config.php~\"][unique_id\"apI05QTPXP2q5I4ACM1BhQAAAFQ\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฌ๐ง
andypiper
2026-08-29 01:03:04
(3 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ฉ๐ช
et-a_network
2026-08-29 00:56:56
(3 hours ago)
34.71.230.61 - - [29/Aug/2026:00:56:56 +0000] "GET /.env.prod HTTP/2.0" 444 0 "-" "crusader-worker/1 ...
show more
34.71.230.61 - - [29/Aug/2026:00:56:56 +0000] "GET /.env.prod HTTP/2.0" 444 0 "-" "crusader-worker/1.0" host=overleaf.et-a.eu via=172.64.198.106 rt=0.000
34.71.230.61 - - [29/Aug/2026:00:56:56 +0000] "GET /.env.dev HTTP/2.0" 444 0 "-" "crusader-worker/1.0" host=overleaf.et-a.eu via=162.158.172.249 rt=0.000
...
show less
Bad Web Bot
Web App Attack
๐ฆ๐บ
Bay13
2026-08-29 00:52:36
(3 hours ago)
CrowdSec:custom/http-sensitive-files
Web App Attack
Anonymous
2026-08-29 00:45:02
(3 hours ago)
suspicious request in access.log
Web App Attack
๐ณ๐ฑ
debestelapp
2026-08-29 00:40:09
(3 hours ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 00:24:15
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:24:07.905061 2026] [security2:error] [pid 31245:tid 31245] [client 34.71.230.61:36082] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.hollywoo12.exotic-dancers-los-angeles.com"] [uri "/.env.backup"] [unique_id "apImp_iGZDGIpB-_8PE4CQAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-08-29 00:10:26
(4 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.71.230.61 (US/United States/61.2 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.71.230.61 (US/United States/61.230.71.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-29 00:06:47
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.71.230.61 (61.230.71.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Aug 28 20:06:40.538986 2026] [security2:error] [pid 24889:tid 24889] [client 34.71.230.61:59156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.birdlovesfish.com.lakesidedetectiveagency.com"] [uri "/.env.prod"] [unique_id "apIikLdC9lbkhvCpOmMhKgAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack