🇳🇱
Savvii
2026-06-15 13:32:45
(2 hours ago)
20 attempts against mh-misbehave-ban on storm
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-15 13:03:08
(2 hours ago)
20 attempts against mh_ha-misbehave-ban on lime
Brute-Force
Bad Web Bot
Web App Attack
🇭🇰
i553041
2026-06-15 12:08:22
(3 hours ago)
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 ( ...
show more
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Linux; Android 8.0.0; LG-H873) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /app/.git/config HTTP/1.1" 404 125 "-" "POLARIS/6.01(BREW 3.1.5;U;en-us;LG;LX265;POLARIS/6.01/WAP;)MMP/2.0 profile/MIDP-201 Configuration /CLDC-1.1"
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /src/.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36 OPR/60.0.3255.109"
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /backend/.git/config HTTP/1.1" 404 187 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3880.4 Safari/537.36"
34.127.48.19 - - [15/Jun/2026:20:08:20 +0800] "GET /frontend/.git/config HTTP/1.1" 404 125 "-" "SonyEricssonK310iv/R4DA Browser/NetFront/3.3 Profi
...
show less
Brute-Force
SSH
🇩🇪
Viveronese
2026-06-15 11:30:10
(4 hours ago)
HTTP vulnerability scanning
Web App Attack
🇳🇱
Savvii
2026-06-15 11:29:32
(4 hours ago)
20 attempts against mh-misbehave-ban on ficus
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-06-15 10:51:27
(4 hours ago)
20 attempts against mh-misbehave-ban on eris
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
maxpower
2026-06-15 09:45:56
(6 hours ago)
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.127.48.19 (US/United States/19.48.127 ...
show more
(exploit_critical) REGOLA 2 - Critical File Exploit Attempt 34.127.48.19 (US/United States/19.48.127.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.127.48.19 - - [15/Jun/2026:11:45:51 +0200] "GET /api/.env.prod HTTP/2.0" 403 146 "-" "Xenu Link Sleuth/1.3.8" "34.127.48.19" host=ipv6.elektra.ovh
34.127.48.19 - - [15/Jun/2026:11:45:51 +0200] "GET /admin/api/.env HTTP/2.0" 403 146 "-" "Xenu Link Sleuth/1.3.8" "34.127.48.19" host=ipv6.elektra.ovh
show less
Port Scan
🇺🇸
mnsf
2026-06-15 06:05:23
(9 hours ago)
Abuse Detected (85)
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-06-15 05:34:41
(10 hours ago)
Excessive 404/403 errors
Brute-Force
🇨🇭
🇨🇭 Hosting
2026-06-15 05:10:15
(10 hours ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇸🇪
nekopavel
2026-06-15 04:40:41
(11 hours ago)
34.127.48.19 - - [15/Jun/2026:06:40:36 +0200]"GET /stage/.env HTTP/1.1" 404 804"-" info.pavel.gg "Mo ...
show more
34.127.48.19 - - [15/Jun/2026:06:40:36 +0200]"GET /stage/.env HTTP/1.1" 404 804"-" info.pavel.gg "Mozilla/5.0 (Windows NT 6.2; ARM; Trident/7.0; Touch; rv:11.0; WPDesktop; NOKIA; Lumia 920) like Geckoo""0.000" "-""The Dalles" "US"
34.127.48.19 - - [15/Jun/2026:06:40:36 +0200]"GET /.env HTTP/1.1" 404 804"-" info.pavel.gg "Mozilla/5.0 (X11; NetBSD amd64; rv:16.0) Gecko/20121102 Firefox/16.0""0.000" "-""The Dalles" "US"
34.127.48.19 - - [15/Jun/2026:06:40:36 +0200]"GET /.env.production.bak HTTP/1.1" 404 804"-" info.pavel.gg "Mozilla/5.0 (Windows NT 6.1; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.87 Safari/537.36""0.000" "-""The Dalles" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-06-15 03:09:30
(12 hours ago)
Multiple WAF Violations
Web App Attack
🇺🇸
mnsf
2026-06-15 00:08:30
(15 hours ago)
Abuse Detected (47)
Brute-Force
Web App Attack
2026-06-14 21:40:02
(18 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 07:04:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.127.48.19 (19.48.127.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.127.48.19 (19.48.127.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 03:04:46.362343 2026] [security2:error] [pid 1030:tid 1055] [client 34.127.48.19:40362] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.cynosureservices.cynosureinternetservices.com"] [uri "/app/.env.production"] [unique_id "ai5SjkZL6_k-earW4jv-mAAAANY"]
show less
Brute-Force
Bad Web Bot
Web App Attack