๐บ๐ธ
leasj
2026-10-09 13:10:08
(3 days ago)
Observed Scanned 37 known-sensitive endpoint(s), e.g.: /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw?? ...
show more
Observed Scanned 37 known-sensitive endpoint(s), e.g.: /@fs/..%2f..%2f..%2f..%2f..%2froot/.env?raw??, /files../.env, /media../.env, /static../.env, /images../.env.
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-10-09 02:24:36
(3 days ago)
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (com ...
show more
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Google-Extended; +http://www.google.com/bot.html)" 8.234.170.93
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env?import&url&inline HTTP/1.1" 403 199 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)" 8.234.170.93
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env.local?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)" 8.234.170.93
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)" 8.234.170.93
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env.production?raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; DeepSeekBot/1.0; +https://www.deepseek.com/)" 8.234.170.93
8.234.170.93 - - [08/Oct/2026:21:24:35 -0500] "GET /.env.production?import&raw HTTP/1.1" 403 199 "-" "Mozilla/5.0 (Macintosh; Intel
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
andypiper
2026-10-09 01:01:51
(3 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 00:13:41
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 20:13:36.019736 2026] [security2:error] [pid 26048:tid 26048] [client 8.234.170.93:52138] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||worshipconcert.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "worshipconcert.com"] [uri "/z9x8c7v6b5-debug-trigger-worshipconcert.com"] [unique_id "asgxsJ3uMDk7RSiyRijEWgAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-09 00:09:47
(3 days ago)
8.234.170.93 - - [09/Oct/2026:02:09:34 +0200] "GET /api/w/admins/jobs_u/get_log_file/../../../../pro ...
show more
8.234.170.93 - - [09/Oct/2026:02:09:34 +0200] "GET /api/w/admins/jobs_u/get_log_file/../../../../proc/self/environ HTTP/2.0" 403 272 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
show less
Web Spam
Blog Spam
Brute-Force
Web App Attack
๐บ๐ธ
mnsf
2026-10-09 00:05:34
(3 days ago)
Too many Status 40X (14)
Brute-Force
Web App Attack
๐บ๐ธ
[email protected]
2026-10-09 00:02:48
(3 days ago)
CrowdSec ban: crowdsecurity/http-crawl-non_statics (duration: 71h59m53s)
Web App Attack
๐ซ๐ท
masterguru
2026-10-09 00:01:45
(3 days ago)
BAD BOT - Detected and Blocked.. Matched phrase "baidu" at REQUEST_HEADERS:User-Agent. (1100000-193)
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-08 23:34:24
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 19:34:16.596294 2026] [security2:error] [pid 13152:tid 13152] [client 8.234.170.93:54052] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||spyasociados.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "spyasociados.com"] [uri "/z9x8c7v6b5-debug-trigger-spyasociados.com"] [unique_id "asgoeEzGMDZbuKZPfhpL0QAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
rh24
2026-10-08 23:20:56
(3 days ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 8.234.170.93 (US/Uni ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 8.234.170.93 (US/United States/93.170.234.8.bc.googleusercontent.com)
show less
Bad Web Bot
๐บ๐ธ
www.nomadomia.com
2026-10-08 22:37:12
(3 days ago)
Hack attack .env
Port Scan
Hacking
Bad Web Bot
Web App Attack
๐ณ๐ฑ
MyGlobalFlowers
2026-10-08 22:31:07
(3 days ago)
Multiple WAF Violations
Web App Attack
๐ง๐ท
radardatelecom
2026-10-08 22:27:05
(3 days ago)
Blocked by Radar da Telecom firewall โ abuseipdb
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-08 22:11:38
(3 days ago)
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 8.234.170.93 (93.170.234.8.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 18:11:31.087741 2026] [security2:error] [pid 20481:tid 20481] [client 8.234.170.93:55226] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lamanchaorchards.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lamanchaorchards.com"] [uri "/z9x8c7v6b5-debug-trigger-lamanchaorchards.com"] [unique_id "asgVE_EWYTMWYJr5U5QQ8wAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
pachec
2026-10-08 22:06:15
(3 days ago)
Automated vulnerability scanning blocked by fail2ban
Web App Attack
Hacking