🇩🇪
snhosting
2026-09-29 07:52:42
(1 week ago)
34.148.136.0 - - [29/Sep/2026:09:52:31 +0200] "GET /.git/config HTTP/1.1" 404 1323 "-" "Mozilla/5.0 ...
show more
34.148.136.0 - - [29/Sep/2026:09:52:31 +0200] "GET /.git/config HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.136.0 - - [29/Sep/2026:09:52:32 +0200] "GET /.env HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.136.0 - - [29/Sep/2026:09:52:32 +0200] "GET /.env.local HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.136.0 - - [29/Sep/2026:09:52:32 +0200] "GET /.env.production HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.136.0 - - [29/Sep/2026:09:52:32 +0200] "GET /.env.staging HTTP/1.1" 404 1323 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
🇫🇷
spongebob1234
2026-09-29 07:40:22
(1 week ago)
Wazuh SIEM: 259 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : ...
show more
Wazuh SIEM: 259 tentative(s) d'accès suspecte(s) / non autorisée(s) détectée(s). Type(s) d'attaque : Web (Erreur 401 Non Autorisé).
show less
Hacking
Bad Web Bot
Web App Attack
🇩🇪
pigro
2026-09-29 05:58:19
(1 week ago)
34.148.136.0 - - [29/Sep/2026:07:58:18 +0200] "GET /app/.env/ HTTP/1.1" 404 2302 "-" "Mozilla/5.0 (W ...
show more
34.148.136.0 - - [29/Sep/2026:07:58:18 +0200] "GET /app/.env/ HTTP/1.1" 404 2302 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.148.136.0 - - [29/Sep/2026:07:58:18 +0200] "GET /api/.env HTTP/1.1" 301 5 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 00:25:09
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 20:25:03.776646 2026] [security2:error] [pid 12831:tid 12831] [client 34.148.136.0:52262] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.momfoo.com"] [uri "/.git/config"] [unique_id "arsFX8U5K-43Cgb5ajH80gAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-09-26 08:55:29
(1 week ago)
34.148.136.0 Web Application Firewall multiple violations
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-26 06:39:29
(1 week ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
TPI-Abuse
2026-09-25 21:07:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 25 17:07:13.776050 2026] [security2:error] [pid 29858:tid 29858] [client 34.148.136.0:57052] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "priorityring.net"] [uri "/.git/config"] [unique_id "arbigeyA2xXVQN6l8ceJNQAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-25 19:57:25
(1 week ago)
20 attempts against mh-misbehave-ban on sedna
Brute-Force
Bad Web Bot
Web App Attack
🇪🇸
masterguru
2026-09-25 13:50:38
(1 week ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110- ...
show more
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
show less
Hacking
🇺🇸
creechy
2026-09-24 19:47:01
(1 week ago)
34.148.136.0 - - [24/Sep/2026:12:46:57 -0700] "GET /.git/config HTTP/1.1" 404 767 "-" "Mozilla/5.0 ( ...
show more
34.148.136.0 - - [24/Sep/2026:12:46:57 -0700] "GET /.git/config HTTP/1.1" 404 767 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-24 19:21:20
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.136.0 (0.136.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 15:21:13.014633 2026] [security2:error] [pid 2659:tid 2659] [client 34.148.136.0:60076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "soulwolf.com.ieas.org"] [uri "/.git/config"] [unique_id "arV4KZmb8bBuLiJdg7m7BQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
debestelapp
2026-09-24 02:05:09
(1 week ago)
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-23 11:15:28
(2 weeks ago)
(modsecurity) srv102 ModSecurity 34.148.136.0 (US/United States/0.136.148.34.bc.googleusercontent.co ...
show more
(modsecurity) srv102 ModSecurity 34.148.136.0 (US/United States/0.136.148.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-23 08:35:27
(2 weeks ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-09-22 08:22:19
(2 weeks ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack