🇧🇪
sid3windr
2026-09-11 10:27:33
UTC ·
(1 month ago)
GET /@fs/../.env?raw?? (Tarpitted for 1d15h8m26s, wasted 8.06MB)
Web App Attack
Anonymous
2026-09-10 04:24:29
UTC ·
(2 months ago)
Aggressive web scan
Web App Attack
🇮🇩
sma14sby
2026-09-10 01:59:40
UTC ·
(2 months ago)
IP 34.86.182.242 has been banned after detecting attempted access to a sensitive endpoint (port scanner).
Open Proxy
Port Scan
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-09 19:18:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 15:18:16.918552 2026] [security2:error] [pid 2668518:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 15:18:16.918552 2026] [security2:error] [pid 2668518:tid 2668622] [client 34.86.182.242:2960] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.83"] [uri "/static../.env"] [unique_id "aqGw-KNfExO91fgzwBqMyAAAAcU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-09 17:34:17
UTC ·
(2 months ago)
10 attempts against mh-misc-ban on neon
Web App Attack
Anonymous
2026-09-09 16:39:12
UTC ·
(2 months ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 12:55:07
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 08:54:59.389699 2026] [security2:error] [pid 7932:tid 7 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 08:54:59.389699 2026] [security2:error] [pid 7932:tid 7932] [client 34.86.182.242:62560] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.61"] [uri "/static../.env"] [unique_id "aqFXI_D4BgVYT5rMLW7S0gAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
maxxsense
2026-09-09 04:06:25
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.86.182.242 (US/United States/242.182.86.34.bc.googleusercontent.com)
SQL Injection
Anonymous
2026-09-09 04:02:16
UTC ·
(2 months ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇨🇭
Mario Bretscher
2026-09-09 02:30:28
UTC ·
(2 months ago)
[Wed Sep 09 04:30:21.319308 2026] [php:error] [pid 944791] [client 34.86.182.242:53518] script '/var/www/html/.env.php' not found or unable to stat
[Wed Sep 09 04:30:25.267966 2026] [php:error] [pid 944778] [client 34.86.182.242:62206] script '/var/w ...
show more
[Wed Sep 09 04:30:21.319308 2026] [php:error] [pid 944791] [client 34.86.182.242:53518] script '/var/www/html/.env.php' not found or unable to stat
[Wed Sep 09 04:30:25.267966 2026] [php:error] [pid 944778] [client 34.86.182.242:62206] script '/var/www/html/phpinfo.php' not found or unable to stat
[Wed Sep 09 04:30:26.538710 2026] [php:error] [pid 944915] [client 34.86.182.242:62294] script '/var/www/html/app_dev.php' not found or unable to stat
...
show less
Web App Attack
Anonymous
2026-09-09 01:49:04
UTC ·
(2 months ago)
denied traffic to a honeypot network. destination port 8443.
Port Scan
Hacking
Anonymous
2026-09-09 01:20:05
UTC ·
(2 months ago)
| Common web attack.
Web App Attack
Hacking
SQL Injection
🇩🇪
maxpower
2026-09-09 01:10:00
UTC ·
(2 months ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.86.182.242 (US/United States/242.182.86.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.86.182.242 - - [09/Sep/2026: ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.86.182.242 (US/United States/242.182.86.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.86.182.242 - - [09/Sep/2026:03:09:54 +0200] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 200 12128 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; LinkedInBot/1.0; +http://www.linkedin.com" "-" host=51.89.2.96
show less
Port Scan
🇺🇸
TPI-Abuse
2026-09-09 00:29:31
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 20:29:25.409693 2026] [security2:error] [pid 10031:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.86.182.242 (242.182.86.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 20:29:25.409693 2026] [security2:error] [pid 10031:tid 10031] [client 34.86.182.242:19212] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.173"] [uri "/static../.env"] [unique_id "aqCoZbu1lD9yw7znwE1WMgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-09 00:19:59
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted] 34.86.182.242 (US/United States/242.182.86.34.bc.googleusercontent.com)
SQL Injection