🇩🇪
FeG Deutschland
2026-09-04 15:20:49
(3 hours ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 124
Exploited Host
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 15:15:31
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 11:15:24.707444 2026] [security2:error] [pid 3402:tid 3402] [client 35.194.226.234:36348] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.peregrineproject.com"] [uri "/.env.local"] [unique_id "aprgjDePemY1oGZvTADYQAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:37:48
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:37:41.720411 2026] [security2:error] [pid 854613:tid 854613] [client 35.194.226.234:33774] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "deal-arabia.com"] [uri "/wp-config.php.swp"] [unique_id "aprXtbjd_gkI7tD96BhDBgAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 14:18:39
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 10:18:31.806768 2026] [security2:error] [pid 26737:tid 26737] [client 35.194.226.234:57640] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wookheo.com"] [uri "/.env.local"] [unique_id "aprTNxaVUOiGTqEcWcvcegAAAIo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
sernate
2026-09-04 13:30:13
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (TW/Taiwan/234.226.194.35.bc.goo ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (TW/Taiwan/234.226.194.35.bc.googleusercontent.com): 10 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_MODSEC
show less
Brute-Force
🇺🇸
ISPLtd
2026-09-04 13:26:57
(5 hours ago)
Sep 4 10:26:56 35.194.226.234 TCP SPT=51520 DPT=80 SYN
Sep 4 10:26:56 35.194.226.234 TCP SPT=51560 ...
show more
Sep 4 10:26:56 35.194.226.234 TCP SPT=51520 DPT=80 SYN
Sep 4 10:26:56 35.194.226.234 TCP SPT=51560 DPT=80 SYN
Sep 4 10:26:56 35.194.226.234 TCP SPT=51550 DPT=80
...
show less
DDoS Attack
🇺🇸
TPI-Abuse
2026-09-04 13:16:09
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 09:16:03.810116 2026] [security2:error] [pid 10783:tid 10783] [client 35.194.226.234:50782] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "teenybikinigirls.com"] [uri "/wp-config.php.bak"] [unique_id "aprEkzOfJZ56rozAp3Z-lgAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 11:44:12
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 07:44:05.871833 2026] [security2:error] [pid 22281:tid 22393] [client 35.194.226.234:48728] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cornell61.org"] [uri "/wp-config.php~"] [unique_id "apqvBSyHY9zQNlwlmOov_QAAAhg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
miszterx.hu
2026-09-04 11:04:46
(7 hours ago)
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ipt ...
show more
XORP (haproxy): 3x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 10:39:07
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 06:39:02.329169 2026] [security2:error] [pid 1402:tid 1402] [client 35.194.226.234:51266] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amgtr.com"] [uri "/.env.dev"] [unique_id "apqfxofBDb7eAljxodJXzgAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
neckaralb-admin.de
2026-09-04 09:18:23
(9 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇸🇪
vaia.cloud
2026-09-04 09:00:09
(10 hours ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-04 08:25:06
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 35.194.226.234 (234.226.194.35.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 04 04:25:02.340135 2026] [security2:error] [pid 25627:tid 25627] [client 35.194.226.234:53358] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.slusarczyk.com"] [uri "/.env.save"] [unique_id "apqAXvcjy4XPqOjVUUWpyAAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-04 07:06:08
(11 hours ago)
Multiple WAF Violations
Web App Attack
🇬🇧
WebNiraj
2026-09-04 07:05:18
(11 hours ago)
(mod_security) mod_security (id:949110) triggered by 35.194.226.234 (TW/Taiwan/234.226.194.35.bc.goo ...
show more
(mod_security) mod_security (id:949110) triggered by 35.194.226.234 (TW/Taiwan/234.226.194.35.bc.googleusercontent.com): 5 in the last 3600 secs [SIGMA]
show less
Brute-Force