🇩🇪
Gwyneth Llewelyn
2026-09-17 20:02:08
(1 month ago)
2026/09/17 21:01:57 [error] 4024566#4024566: *2173 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.35.132.143 - - [17/Sep/2026:21:01:57 ...
show more
2026/09/17 21:01:57 [error] 4024566#4024566: *2173 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.35.132.143 - - [17/Sep/2026:21:01:57 +0100] "GET /.env HTTP/1.1" 403 1057 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/17 21:02:06 [error] 4024566#4024566: *2168 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /app/.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
show less
Brute-Force
Web App Attack
🇿🇦
conure.sh
2026-09-17 12:11:17
(1 month ago)
csagent: score 20.5: 404 noise floor x2, secrets grab x2; 1 domain(s) in 3s
Web App Attack
🇸🇪
vaia.cloud
2026-09-16 23:45:01
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-16 22:16:19
(1 month ago)
2026/09/16 23:16:11 [error] 1464671#1464671: *158041 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.35.132.143 - - [16/Sep/2026:23:16:1 ...
show more
2026/09/16 23:16:11 [error] 1464671#1464671: *158041 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
34.35.132.143 - - [16/Sep/2026:23:16:11 +0100] "GET /.env HTTP/1.1" 403 1057 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/16 23:16:17 [error] 1464671#1464671: *158041 access forbidden by rule, client: 34.35.132.143, server: centroestudostibetanos.org, request: "GET /app/.env HTTP/1.1", host: "nalanda.centroestudostibetanos.org"
show less
Brute-Force
Web App Attack
🇵🇱
nakordoni.eu
2026-09-16 21:30:03
(1 month ago)
Blocked by nakordoni.eu automated security: nakordoni-probe-gate. Jail: nakordoni-probe-gate, 1 matches. ISP: Google LLC (ZA), Usage: Data Center/Web Hosting/Transit. Prior AbuseIPDB score at ban time: 92/100.
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-14 02:21:27
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇫🇷
masterguru
2026-09-14 01:43:17
(1 month ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇫🇷
masterguru
2026-09-13 15:26:51
(1 month ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
Hacking
🇳🇱
e.fierstra
2026-09-11 14:00:33
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇮🇳
evicky2002
2026-09-10 06:00:02
(1 month ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇳🇱
e.fierstra
2026-09-09 15:14:00
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-09 13:25:02
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-09 10:43:03
(1 month ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-09 10:03:39
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.35.132.143 (143.132.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:03:35.639082 2026] [security2:error] [pid 32479:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.132.143 (143.132.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 06:03:35.639082 2026] [security2:error] [pid 32479:tid 32479] [client 34.35.132.143:53614] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nihlabs.org"] [uri "/.git/config"] [unique_id "aqEu99WAd6XmYXHBSWWcvQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-09 08:57:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.35.132.143 (143.132.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 04:56:59.034949 2026] [security2:error] [pid 5066:tid 5 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.35.132.143 (143.132.35.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 09 04:56:59.034949 2026] [security2:error] [pid 5066:tid 5066] [client 34.35.132.143:54440] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "nightowlprinting.com"] [uri "/.git/config"] [unique_id "aqEfWxJllkMiV3VSsB74oQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
