🇺🇸
Mundo Bueno
2026-09-30 04:32:41
UTC ·
(1 month ago)
[ISILIA Protection v2.3] Tentative d'accès: /.env.development [RATE LIMITED - 1800s quarantine] | Pays: GB | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
Hacking
Web App Attack
Anonymous
2026-09-29 05:07:46
UTC ·
(1 month ago)
34.147.141.152 - - [29/Sep/2026:07:07:45 +0200] "GET /.git/config HTTP/1.1" 404 6895 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 23:59:07
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:59:04.036601 2026] [security2:error] [pid 24504:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 19:59:04.036601 2026] [security2:error] [pid 24504:tid 24504] [client 34.147.141.152:38290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.amgtr.com"] [uri "/.git/config"] [unique_id "arr_SCTnI29TAh5OhWC6UwAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-28 20:15:25
UTC ·
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-28 19:59:35
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:59:28.413127 2026] [security2:error] [pid 5395:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 15:59:28.413127 2026] [security2:error] [pid 5395:tid 5395] [client 34.147.141.152:48080] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "janbloom-art.com"] [uri "/.git/config"] [unique_id "arrHIGkPg0gavL8cv3HNTQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-27 07:02:11
UTC ·
(1 month ago)
[SunSep2709:02:06.4747332026][security2:error][pid3335335:tid3335485][client34.147.141.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htac ...
show more
[SunSep2709:02:06.4747332026][security2:error][pid3335335:tid3335485][client34.147.141.152:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.eimeko.ch\"][uri\"/.env.bak\"][unique_id\"ari_bqbyz1z5CoZtcOh7swAAARQ\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-09-26 06:52:31
UTC ·
(1 month ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-09-25 19:51:13
UTC ·
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.147.141.152 (GB/United Kingdom/152.141.147.34.bc.googleusercontent.com)
SQL Injection
🇨🇦
Sakusen
2026-09-22 07:54:13
UTC ·
(1 month ago)
Automated web attack: 265 reqs, 252 paths probed, 218 returned 404; probed: 206 .env, 43 .php, 2 other, 1 .git
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-21 15:10:14
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:10:08.431413 2026] [security2:error] [pid 7243:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.147.141.152 (152.141.147.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 11:10:08.431413 2026] [security2:error] [pid 7243:tid 7243] [client 34.147.141.152:56644] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "customdesignsbybjp.com"] [uri "/.git/config"] [unique_id "arFI0No0Ldhi322cs83WfwAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
bazter.pro
2026-09-21 11:27:17
UTC ·
(1 month ago)
Fail2Ban: plesk-bot-aggressive - 15 failures
Port Scan
Bad Web Bot
Web App Attack
🇩🇪
ghostwarriors
2026-09-20 19:20:05
UTC ·
(1 month ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-20 18:53:26
UTC ·
(1 month ago)
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /dist/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "G ...
show more
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /dist/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /public_html/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /htdocs/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /www/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.147.141.152 - - [20/Sep/2026:20:53:24 +0200] "GET /html/.env HTTP/1.1" 404 516 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/
show less
Bad Web Bot
🇳🇱
Savvii
2026-09-20 18:10:28
UTC ·
(1 month ago)
20 attempts against mh-misbehave-ban on onion
Brute-Force
Bad Web Bot
Web App Attack