Anonymous
2026-10-10 02:56:40
(5 days ago)
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/ ...
show more
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.dev HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.prod HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.stage HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:41 -0700] "GET /.env.ci HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Wind
show less
Web App Attack
Port Scan
Anonymous
2026-10-01 13:14:16
(2 weeks ago)
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/ ...
show more
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.dev HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.prod HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.stage HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:41 -0700] "GET /.env.ci HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Wind
show less
Web App Attack
Port Scan
πΊπΈ
cwytech
2026-09-29 18:15:06
(2 weeks ago)
Fleet-wide ban from the Ghostfleet π». Triggered by scenario: cwy/tpot-web-crit.
Bad Web Bot
Web App Attack
π§πΎ
lns.bz
2026-09-29 18:03:27
(2 weeks ago)
Too many 404 requests [BY]
Web App Attack
πͺπΈ
robotstxt
2026-09-26 06:58:16
(2 weeks ago)
34.13.236.45 - - [26/Sep/2026:06:57:07 +0000] "GET /.env HTTP/1.1" 403 18895 "-" "Mozilla/5.0 (Windo ...
show more
34.13.236.45 - - [26/Sep/2026:06:57:07 +0000] "GET /.env HTTP/1.1" 403 18895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.13.236.45"
34.13.236.45 - - [26/Sep/2026:06:57:09 +0000] "GET /.env.local HTTP/1.1" 403 18918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.13.236.45"
34.13.236.45 - - [26/Sep/2026:06:57:10 +0000] "GET /.env.production HTTP/1.1" 403 18918 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.13.236.45"
34.13.236.45 - - [26/Sep/2026:06:57:11 +0000] "GET /.env.staging HTTP/1.1" 403 18905 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.13.236.45"
34.13.236.45 - - [26/Sep/2026:06:57:13 +0000] "GET /.env.development HTTP/1.1" 403 18918 "-" "Mozil
...
show less
Web App Attack
Anonymous
2026-09-25 13:19:13
(2 weeks ago)
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/ ...
show more
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.dev HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.prod HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.stage HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:41 -0700] "GET /.env.ci HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Wind
show less
Web App Attack
Port Scan
π«π·
dynamix
2026-09-24 19:03:23
(3 weeks ago)
Multiple WAF Violations
Web App Attack
πΊπΈ
TPI-Abuse
2026-09-24 18:24:13
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.13.236.45 (45.236.13.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.236.45 (45.236.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 14:24:08.705107 2026] [security2:error] [pid 7037:tid 7037] [client 34.13.236.45:39462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.numbulary.org"] [uri "/.git/config"] [unique_id "arVqyFMPcBDm2UfFci2bgQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π©πͺ
rh24
2026-09-24 15:44:26
(3 weeks ago)
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.13.236.45 (45.236.13.34.bc.googleuserc ...
show more
(secretscan) Secret-Scanner (env/git/ssh/credentials) from 34.13.236.45 (45.236.13.34.bc.googleusercontent.com)
show less
Hacking
π©πͺ
Hazzard
2026-09-24 14:18:38
(3 weeks ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
πΊπΈ
TPI-Abuse
2026-09-24 01:29:44
(3 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.13.236.45 (45.236.13.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.13.236.45 (45.236.13.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:29:37.105668 2026] [security2:error] [pid 10914:tid 10914] [client 34.13.236.45:44472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "idgcasadelgeologo.com"] [uri "/.git/config"] [unique_id "arR9ASKvyRBOzLxUJNlLBgAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-09-23 21:49:42
(3 weeks ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 13:48:18
(3 weeks ago)
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/ ...
show more
fail2ban jail apache-scanner: 34.13.236.45 - - [21/Sep/2026:14:58:39 -0700] "GET /.env.example HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.dev HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.prod HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:40 -0700] "GET /.env.stage HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 34.13.236.45 - - [21/Sep/2026:14:58:41 -0700] "GET /.env.ci HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Wind
show less
Web App Attack
Port Scan
Anonymous
2026-09-21 21:58:36
(3 weeks ago)
fail2ban jail apache-secrets-probe: 34.13.236.45 - - [21/Sep/2026:14:58:34 -0700] "GET /.env.local H ...
show more
fail2ban jail apache-secrets-probe: 34.13.236.45 - - [21/Sep/2026:14:58:34 -0700] "GET /.env.local HTTP/1.1" 403 7885 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack
Anonymous
2026-09-21 08:16:48
(3 weeks ago)
suspicious behavior
Blog Spam
Brute-Force
Web App Attack