๐ฉ๐ช
NewWavesApp
2026-09-29 10:09:05
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.159.202.132 (DE/Germany/132.202.159.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
๐ฉ๐ช
ghostwarriors
2026-09-29 09:50:07
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ฉ๐ช
FeG Deutschland
2026-09-29 09:44:32
(1 month ago)
Looking for CMS/PHP/SQL vulnerablilities/excessive crawling - 1248
Exploited Host
Web App Attack
Anonymous
2026-09-29 08:41:38
(1 month ago)
34.159.202.132 - - [29/Sep/2026:10:41:38 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) ...
show more
34.159.202.132 - - [29/Sep/2026:10:41:38 +0200] "POST /cgi-bin/php-cgi.exe?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input HTTP/2.0" 403 146 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
...
show less
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-29 08:29:47
(1 month ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
zwebvigil
2026-09-29 06:06:41
(1 month ago)
34.159.202.132 [28/Sep/2026:23:06:40 -0700] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" port=45972 "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" "-" "img.<host>" 337
34.159 ...
show more
34.159.202.132 [28/Sep/2026:23:06:40 -0700] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" port=45972 "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" "-" "img.<host>" 337
34.159.202.132 [28/Sep/2026:23:06:40 -0700] "GET /manifest.json HTTP/1.1" 404 196 "-" port=45980 "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" "-" "img.<host>" 717
34.159.202.132 [28/Sep/2026:23:06:40 -0700] "GET /manifest.json HTTP/1.1" 404 196 "-" port=45980 "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36" "-" "-"
show less
Web App Attack
๐บ๐ธ
Charlesiv
2026-09-29 06:00:40
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /cgi-bin/php
Query: ?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
Timestamp: 2026-09-29T05:41: ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (POST method)
Endpoint: /cgi-bin/php
Query: ?%ADd+allow_url_include%3d1+%ADd+auto_prepend_file%3dphp://input
Timestamp: 2026-09-29T05:41:49Z
Ray ID: a428a9373ab0bc5c
UA: Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)
show less
Bad Web Bot
๐ช๐ธ
robotstxt
2026-09-29 04:50:52
(1 month ago)
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e ...
show more
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /icons/.%2e/.%2e/.%2e/.%2e/.%2e/.%2e/proc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f.env HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
34.159.202.132 - - [29/Sep/2026:04:50:50 +0000] "GET /api/uploads/%2e%2e%2f%2e%2e%2f%2e%2e%2fproc/self/environ HTTP/1.1" 400 193 "-" "-" "-" edge="34.159.202.132"
...
show less
Web Spam
Web App Attack
Anonymous
2026-09-28 15:24:48
(1 month ago)
2026-09-25 21:20:13,197 fail2ban.actions [626]: NOTICE [apache-auth] Ban 34.159.202.132
2026-09-28 17:24:47,620 fail2ban.actions [626]: NOTICE [apache-fakegooglebot] Ban 34.159.202.132
...
Brute-Force
๐ซ๐ท
breubit
2026-09-28 14:23:53
(1 month ago)
34.159.202.132 - - [28/Sep/2026:16:23:52 +0200] "GET /@fs/src/.env?raw?? HTTP/1.1" 404 6151 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
...
Web App Attack
๐บ๐ธ
Charlesiv
2026-09-28 14:11:28
(1 month ago)
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /__nuxt_config.json
Timestamp: 2026-09-28T14:10:48Z
Ray ID: a423556a6985df5e
UA: Mozilla/5.0 AppleWebKit/537.36 (K ...
show more
Triggered Cloudflare WAF (firewallCustom) from DE.
Action taken: BLOCK
ASN: 396982 (Google LLC)
Protocol: HTTP/2 (GET method)
Endpoint: /__nuxt_config.json
Timestamp: 2026-09-28T14:10:48Z
Ray ID: a423556a6985df5e
UA: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot
show less
Bad Web Bot
๐ฑ๐ป
instant
2026-09-28 13:19:32
(1 month ago)
28.09.2026 13:19:32 Git repository scan (/.git)
Hacking
Web App Attack
๐ฉ๐ช
pscriptos
2026-09-28 13:13:34
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
๐ณ๐ด
Abuse Buster
2026-09-28 12:57:31
(1 month ago)
34.159.202.132 - - [28/Sep/2026:14:57:28 +0200] "GET /dev/.env HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.159.202.132 - - [28/Sep/2026:14:57:28 +0200] "GET /production/.env HTTP/2.0" 404 22 "-" "Mozilla/ ...
show more
34.159.202.132 - - [28/Sep/2026:14:57:28 +0200] "GET /dev/.env HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Kimi-SearchBot/1.0; +https://kimi.ai/)"
34.159.202.132 - - [28/Sep/2026:14:57:28 +0200] "GET /production/.env HTTP/2.0" 404 22 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
Web App Attack
๐ฉ๐ช
raph
2026-09-28 12:39:46
(1 month ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack