🇩🇪
rh24
2026-06-15 06:46:42
(7 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.194.192.134 (TW/T ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 35.194.192.134 (TW/Taiwan/134.192.194.35.bc.googleusercontent.com)
show less
Bad Web Bot
🇳🇱
Cloud86 B.V.
2026-06-15 02:39:05
(11 hours ago)
categories: DDoS Attack
DDoS Attack
🇫🇷
✨
2026-06-15 00:36:16
(13 hours ago)
Domain : course.shoefitters.org
Rule : env
2026-06-15 00:34:48 217.194.212.111 GET /services/auth/.e ...
show more
Domain : course.shoefitters.org
Rule : env
2026-06-15 00:34:48 217.194.212.111 GET /services/auth/.env - 443 - 35.194.192.134 HTTP/1.1 Opera/7.51 (Windows NT 5.1; U) [en] - course.shoefitters.org 404 0 0 8148 180 3019 - -
show less
Hacking
SQL Injection
🇫🇷
COMAITE
2026-06-14 22:31:45
(15 hours ago)
Suspicious URL access.
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-14 22:00:42
(16 hours ago)
Auto-ban: >3000 req/min op 2026-06-14
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-06-14 21:07:05
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.192.134 (134.192.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.192.134 (134.192.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 17:06:57.217432 2026] [security2:error] [pid 26951:tid 26951] [client 35.194.192.134:44770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "g-peopleland.com"] [uri "/.env.save"] [unique_id "ai8X8ZtQ1DmOijVlQdxfGgAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-14 17:46:55
(20 hours ago)
Multiple WAF Violations
Web App Attack
🇩🇪
updown.io
2026-06-14 04:48:06
(1 day ago)
{"level":"info","ts":1781412483.785473,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1781412483.785473,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.194.192.134","remote_port":"54996","client_ip":"35.194.192.134","proto":"HTTP/1.1","method":"GET","host":"5www.update.dgnvuwww.www.www.www.status.quarks-erp.com","uri":"/backend/.env.production","headers":{"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (X11; U; OpenBSD arm; en-us) AppleWebKit/531.2 (KHTML, like Gecko) Safari/531.2 Epiphany/2.30.0"],"Accept-Charset":["utf-8"]}},"bytes_read":0,"user_id":"","duration":0.000059785,"size":0,"status":308,"resp_headers":{"Server":["Caddy"],"Connection":["close"],"Location":["https://5www.update.dgnvuwww.www.www.www.status.quarks-erp.com/backend/.env.production"],"Content-Type":[]}}
{"level":"info","ts":1781412483.7870564,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"35.194.192.134","remote_port":"54988","client_ip":"35.194.192.134","proto":"HTTP/1.1","method
...
show less
DDoS Attack
Web App Attack
🇫🇷
Octopuce
2026-06-14 03:09:07
(1 day ago)
Aggressive web search of vulnerable pages: /stage/.env /v3/.env /api/v1/.env /api/v2/.env /developme ...
show more
Aggressive web search of vulnerable pages: /stage/.env /v3/.env /api/v1/.env /api/v2/.env /development/.env ...
show less
Web App Attack
🇬🇧
consul.to
2026-06-14 03:08:56
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇮🇹
VHosting
2026-06-14 02:25:04
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇸🇪
vaia.cloud
2026-06-14 01:50:02
(1 day ago)
trying wp-login.php/xmlrpc.php 151 times in 1 minutes
Brute-Force
Web App Attack
🇫🇮
habs
2026-06-13 19:25:38
(1 day ago)
35.194.192.134 - - [13/Jun/2026:22:25:34 +0300] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03|\x8A\x ...
show more
35.194.192.134 - - [13/Jun/2026:22:25:34 +0300] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03|\x8A\xB8D\xCF.4\xA4\x126\xC2\x08h\xBB\xAE4\xC1\x02\xEC7\x88\x06\xDE\x18t\xD4\xA2\x91\xE3J'E \x96\xC4\xAA\x1E\x03^\x5C\x9CyYv\x91R\xB9\x00\x22C\xEE\x01\x80\x22\x95\x8AV\xDF\x99(;1\xB9@c\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
35.194.192.134 - - [13/Jun/2026:22:25:37 +0300] "\x16\x03\x01\x00\xEA\x01\x00\x00\xE6\x03\x03J^\x19\x9ErR`2\x0CM\xC0\x0F\xE3\xB1\xA0\x9Cl\xE4\x85V|?P\x06D\xD6\xD1=\xE0\xDAq# i\xA2\x80\xAF\x005 \x88W\xFF\xE1$\xF3\xF9\x9B\x8C\xF1Y]\x0C\x19\xA27\xA2\x8C&\xAC\x0E\xBA\x00\xF5\xE0\x00&\xC0+\xC0/\xC0,\xC00\xCC\xA9\xCC\xA8\xC0\x09\xC0\x13\xC0" 400 150 "-" "-"
...
show less
Port Scan
Bad Web Bot