🇫🇮
tjs
2026-09-30 13:10:00
UTC ·
(1 month ago)
web attack
Hacking
Web App Attack
🇩🇪
yvoictra
2026-09-30 04:59:47
UTC ·
(1 month ago)
Bloqueado automáticamente por CrowdSec. Escenario: crowdsecurity/http-probing
Web App Attack
🇫🇷
masterguru
2026-09-30 04:12:12
UTC ·
(1 month ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-30 04:00:59
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:00:49.491226 2026] [security2:error] [pid 18355:tid 18 ...
show more
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 30 00:00:49.491226 2026] [security2:error] [pid 18355:tid 18355] [client 8.229.31.135:47692] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||lookoutmountainrvpark.com.jbcllcnet.com|F|2"] [data ".com.jbcllcnet.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lookoutmountainrvpark.com.jbcllcnet.com"] [uri "/z9x8c7v6b5-debug-trigger-lookoutmountainrvpark.com.jbcllcnet.com"] [unique_id "aryJcTh5aI8qezt0Ar35qAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-30 03:16:55
UTC ·
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇩🇪
LRob
2026-09-30 01:35:57
UTC ·
(1 month ago)
Wordlist path sweep | method: GET | path: /build/manifest.json, /68x7uaylir936cz9isgb, /.vite/manifest.json (+3 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, CCBot/2 ...
show more
Wordlist path sweep | method: GET | path: /build/manifest.json, /68x7uaylir936cz9isgb, /.vite/manifest.json (+3 more) | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36, CCBot/2.0 (https://commoncrawl.org/faq/), Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)
show less
Port Scan
Web App Attack
🇧🇪
cmbplf
2026-09-30 01:30:54
UTC ·
(1 month ago)
1.202 requests with url.path *.env
143 requests with url.path */proc/*
110 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
🇩🇪
big-cloud.nl
2026-09-30 01:25:07
UTC ·
(1 month ago)
Try to access /backend/.env
Web App Attack
2026-09-30 00:49:48
UTC ·
(1 month ago)
Aggressive web scan
Web App Attack
2026-09-30 00:45:28
UTC ·
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 8.229.31.135 (US/United States/135.31.229.8.bc.googleusercontent.com)
SQL Injection
🇺🇸
creechy
2026-09-29 23:32:48
UTC ·
(1 month ago)
8.229.31.135 - - [29/Sep/2026:16:32:44 -0700] "GET /appearance/../../.env HTTP/1.1" 400 796 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
...
Hacking
Bad Web Bot
🇩🇪
FD-IX
2026-09-29 23:08:49
UTC ·
(1 month ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 22:51:18
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:51:11.941795 2026] [security2:error] [pid 15466:tid 15 ...
show more
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 18:51:11.941795 2026] [security2:error] [pid 15466:tid 15466] [client 8.229.31.135:34694] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||loriaco.com.lucid-events.com|F|2"] [data ".com.lucid-events.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "loriaco.com.lucid-events.com"] [uri "/z9x8c7v6b5-debug-trigger-loriaco.com.lucid-events.com"] [unique_id "arxA3xXZ9_r58GaUnfAxNAAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
Mediashaker
2026-09-29 21:33:49
UTC ·
(1 month ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 8.229.31.135 (US/United States/135.31.229.8.bc.googleusercontent.com)
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-29 20:52:00
UTC ·
(1 month ago)
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:51:52.992793 2026] [security2:error] [pid 7692:tid 782 ...
show more
(mod_security) mod_security (id:210730) triggered by 8.229.31.135 (135.31.229.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:51:52.992793 2026] [security2:error] [pid 7692:tid 7825] [client 8.229.31.135:47058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lbakkercpa.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lbakkercpa.com"] [uri "/z9x8c7v6b5-debug-trigger-lbakkercpa.com"] [unique_id "arwk6HkpNCAW1nicYM9JCQAAARY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
