๐ฉ๐ช
todix
2026-08-27 12:45:25
(15 minutes ago)
Web App Attack Exploid from 34.75.164.44
Web App Attack
๐ณ๐ฑ
e.fierstra
2026-08-27 12:35:26
(25 minutes ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-08-27 12:28:53
(31 minutes ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1247
Exploited Host
Web App Attack
๐ฌ๐ง
Aetherweb Ark
2026-08-27 12:14:12
(46 minutes ago)
(mod_security) mod_security (id:949110) triggered by 34.75.164.44 (US/United States/44.164.75.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.75.164.44 (US/United States/44.164.75.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
๐ธ๐ช
vaia.cloud
2026-08-27 11:45:04
(1 hour ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-08-27 11:34:36
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.75.164.44 (44.164.75.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.164.44 (44.164.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 07:34:30.664915 2026] [security2:error] [pid 10590:tid 10590] [client 34.75.164.44:46116] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.guthrieclan.us.joshuashands.org"] [uri "/.env.old"] [unique_id "apAgxv-uFtB-AYjI_ZMLxwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฒ๐พ
Rizzy
2026-08-27 11:32:18
(1 hour ago)
Multiple WAF Violations
Brute-Force
Web App Attack
Anonymous
2026-08-27 11:14:08
(1 hour ago)
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env.prod HTTP/1.1" 404 196 "-" "crusader-worker ...
show more
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env.prod HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /wp-config.php.bak HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env.save HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env.production HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /actuator/configprops HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /wp-config.php.swp HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /.env.backup HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.164.44 - - [27/Aug/2026:19:14:07 +0800] "GET /crusader-404-probe HTTP/1.1" 404 196 "-" "crusader-worker/1.0"
34.75.1
...
show less
Bad Web Bot
Web App Attack
Anonymous
2026-08-27 10:59:05
(2 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /_ignition/health-check H ...
show more
Bot / scanning and/or hacking attempts: GET /.env.production HTTP/1.1, GET /_ignition/health-check HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /wp-config.php.bak HTTP/1.1, GET /wp-config.php.swp HTTP/1.1
show less
Hacking
Web App Attack
๐ฉ๐ช
maxpower
2026-08-27 10:44:20
(2 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.75.164.44 (US/United States/44.164.75 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.75.164.44 (US/United States/44.164.75.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.75.164.44 - - [27/Aug/2026:12:44:18 +0200] "GET /wp-config.php.bak HTTP/1.1" 200 11911 "-" "crusader-worker/1.0" "-" host=www.giochi.lorenzopisani.it
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-08-27 10:36:30
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.75.164.44 (44.164.75.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.164.44 (44.164.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 06:36:24.624601 2026] [security2:error] [pid 30851:tid 30851] [client 34.75.164.44:38104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.ad1soundstudio.darkalleyproductions.com"] [uri "/wp-config.php~"] [unique_id "apATKCylVZKlR9gyx_WucAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐น
VHosting
2026-08-27 10:15:08
(2 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-08-27 10:12:37
(2 hours ago)
Web attack/malicious scanning detected
Web App Attack