🇳🇱
homeshowdomain.nl
2026-09-18 21:59:50
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-17.
show less
Web App Attack
SSH
Hacking
2026-09-18 07:30:05
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
WellSpring
2026-09-17 07:42:54
(1 month ago)
env leak on 661.today/site/.env — WellSpr.ing/NetSentinel civic-AI security layer
Web App Attack
🇳🇱
Site.eu
2026-09-17 03:36:55
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇨🇿
ddw
2026-09-17 03:31:03
(1 month ago)
ModSecurity detection - Rules: 949110(Inbound Anomaly Score Exceeded (Total Score: 55))
Web App Attack
🇬🇧
consul.to
2026-09-17 02:55:06
(1 month ago)
Web attack/malicious scanning detected
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:34:34
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:34:29.343654 2026] [security2:error] [pid 6710:tid 6710] [client 34.141.31.69:52450] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cypro.com"] [uri "/.git/config"] [unique_id "aqtRteWy1g5k5XuzQ3KiUAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-17 02:14:14
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 22:14:08.797004 2026] [security2:error] [pid 24918:tid 24946] [client 34.141.31.69:44032] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cynosurelandscapers.com"] [uri "/.git/config"] [unique_id "aqtM8P0cTA0O0hejp4DCyQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-09-17 02:02:16
(1 month ago)
Domain : cylinderrebores.co.uk
Rule : env
2026-09-17 02:01:33 W3SVC92 PLESK72 79.171.39.6 GET /.env. ...
show more
Domain : cylinderrebores.co.uk
Rule : env
2026-09-17 02:01:33 W3SVC92 PLESK72 79.171.39.6 GET /.env.local - 443 - 34.141.31.69 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - - cylinderrebores.co.uk 301 0 0 465 288 22 - -
show less
Hacking
SQL Injection
2026-09-17 01:58:45
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇨🇭
Origon
2026-09-16 15:07:04
(1 month ago)
http-sensitive-files - IP: 34.141.31.69 - time="2026-09-16T17:07:04+02:00" level=info msg="(555f66b ...
show more
http-sensitive-files - IP: 34.141.31.69 - time="2026-09-16T17:07:04+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.141.31.69 (DE/396982) : 4h ban on Ip 34.141.31.69" module=db
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:25:51
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.31.69 (69.31.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:25:45.525060 2026] [security2:error] [pid 19407:tid 19436] [client 34.141.31.69:38656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "360degreevalue.com"] [uri "/.git/config"] [unique_id "aqqY2Q_LulmWyAkLxIdvPwAAAQA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
ipoac.nl
2026-09-15 16:37:38
(1 month ago)
-:443 34.141.31.69 - - [15/Sep/2026:18:37:35 +0200] - "GET /.git/config HTTP/1.1" 404 48360 "-" "Moz ...
show more
-:443 34.141.31.69 - - [15/Sep/2026:18:37:35 +0200] - "GET /.git/config HTTP/1.1" 404 48360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot