🇬🇧
Smish
2026-06-15 13:52:51
(1 day ago)
HONEYPOT HIT --> Fail2ban time=1781531569 log=2026-06-15T14:52:49+01:00 ip=34.133.236.64 host=mb7ivr ...
show more
HONEYPOT HIT --> Fail2ban time=1781531569 log=2026-06-15T14:52:49+01:00 ip=34.133.236.64 host=mb7ivr-6m.ext.lon.44net.co.uk method=GET uri="/.git/config" status=404 ua="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.19 Safari/537.36 OPR/64.0.3409.0 (Edition developer)" ref="-" rid=47f876b2843f84add9f174b424278a05
show less
Web App Attack
🇫🇷
dynamix
2026-06-15 12:28:06
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-06-15 11:29:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.133.236.64 (64.236.133.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.133.236.64 (64.236.133.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 15 07:29:18.361348 2026] [security2:error] [pid 15122:tid 15122] [client 34.133.236.64:41262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lazymanvegan.com"] [uri "/src/.git/config"] [unique_id "ai_iDq8JHMSVi4GNHIEktwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-15 10:02:43
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
🇷🇺
DZBOT
2026-06-15 09:26:30
(1 day ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
2026-06-15 08:37:15
(1 day ago)
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /api/.env.local HTTP/1.1" 404 184 "-" "Mozilla/5 ...
show more
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /api/.env.local HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Linux; Android 9; SM-A530W) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36"
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /.env.prod.bak HTTP/1.1" 404 124 "-" "Mozilla/5.0 (iPhone; U; CPU iPhone OS 5_1_1 like Mac OS X; da-dk) AppleWebKit/534.46.0 (KHTML, like Gecko) CriOS/19.0.1084.60 Mobile/9B206 Safari/7534.48.3"
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /backend/.env.dev HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/74.0.3729.131 Safari/537.36"
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /env.txt HTTP/1.1" 404 184 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3770.142 Safari/537.36"
34.133.236.64 - - [15/Jun/2026:10:37:13 +0200] "GET /.env.local.bak HTTP/1.1" 404 184 "-" "Mozilla/5.0 (X11; Linux x
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-15 04:46:09
(2 days ago)
Excessive multi-domain requests
Brute-Force
2026-06-15 03:23:44
(2 days ago)
Multiple web server 400 error codes from same source ip
Web App Attack
🇩🇪
gadix
2026-06-15 01:05:23
(2 days ago)
[15/Jun/2026:03:05:23.156528 +0200] ai9P05IO50Gd1HtJCZkkwgAAAMQ 34.133.236.64 54888 127.0.0.1 7081
[ ...
show more
[15/Jun/2026:03:05:23.156528 +0200] ai9P05IO50Gd1HtJCZkkwgAAAMQ 34.133.236.64 54888 127.0.0.1 7081
[15/Jun/2026:03:05:23.353451 +0200] ai9P075NxP8SdwM7qaVD9QAAAFc 34.133.236.64 54902 127.0.0.1 7081
[15/Jun/2026:03:05:23.354807 +0200] ai9P05IO50Gd1HtJCZkkwwAAAMo 34.133.236.64 54898 127.0.0.1 7081
...
show less
Web App Attack
🇺🇸
mnsf
2026-06-15 00:18:12
(2 days ago)
Scanning/Probing (34)
Brute-Force
Web App Attack
🇩🇪
updown.io
2026-06-14 23:04:07
(2 days ago)
{"level":"info","ts":1781478243.515115,"logger":"http.log.access.log1","msg":"handled request","requ ...
show more
{"level":"info","ts":1781478243.515115,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.133.236.64","remote_port":"53662","client_ip":"34.133.236.64","proto":"HTTP/1.1","method":"GET","host":"status.wssg.com","uri":"/.env.pre-production","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/2.0 (compatible; Ask Jeeves/Teoma)"]},"tls":{"resumed":false,"version":772,"cipher_suite":4865,"proto":"","server_name":"status.wssg.com","ech":false}},"bytes_read":0,"user_id":"","duration":0.000837674,"size":0,"status":429,"resp_headers":{"Server":["Caddy"],"Alt-Svc":["h3=\":443\"; ma=2592000"],"Retry-After":["1"]}}
{"level":"info","ts":1781478243.5380685,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.133.236.64","remote_port":"53756","client_ip":"34.133.236.64","proto":"HTTP/1.1","method":"GET","host":"status.wssg.com","uri":"/.env.testing","headers":{"User-Agent":["Mozil
...
show less
DDoS Attack
Web App Attack
🇺🇸
TPI-Abuse
2026-06-14 10:10:40
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.133.236.64 (64.236.133.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.133.236.64 (64.236.133.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 06:10:36.880125 2026] [security2:error] [pid 26050:tid 26050] [client 34.133.236.64:50886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "derekvantreese.com"] [uri "/.env.test"] [unique_id "ai5-HIugkmJ-Vz4TQ_uEPAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-14 07:08:15
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
🇫🇷
masterguru
2026-06-14 06:01:54
(3 days ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-197)
Hacking
Web App Attack
🇮🇹
VHosting
2026-06-14 04:15:04
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack