🇨🇭
ca
2026-10-22 05:17:21
(14 minutes ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇵🇱
strefapi_com
2026-10-22 03:56:17
(1 hour ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
🇷🇴
clauss
2026-10-22 00:24:57
(5 hours ago)
34.154.140.246 - - [22/Oct/2026:03:24:57 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 ...
show more
34.154.140.246 - - [22/Oct/2026:03:24:57 +0300] "GET /.git/config HTTP/1.1" 200 314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [22/Oct/2026:03:24:57 +0300] "GET /.env.local HTTP/1.1" 200 314 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-10-21 22:05:23
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.140.246 (246.140.154.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.140.246 (246.140.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 21 18:05:18.233966 2026] [security2:error] [pid 13015:tid 13015] [client 34.154.140.246:48856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autoconfig.amlanddgtours.com"] [uri "/.git/config"] [unique_id "atk3Hp8TpFDq2tci-YsSrgAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-10-20 21:59:09
(1 day ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-10-19.
show less
Web App Attack
SSH
Hacking
🇳🇱
Savvii
2026-10-20 15:58:52
(1 day ago)
561 attempts against mh_ha-misbehave-ban on tin
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-10-20 15:55:19
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
Savvii
2026-10-20 09:58:41
(1 day ago)
21 attempts against mh-misbehave-ban on tin
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
CoreTech srl
2026-10-20 08:21:52
(1 day ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇩🇪
ghostwarriors
2026-10-18 23:50:08
(3 days ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-10-18 23:41:43
(3 days ago)
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /var/www/.env HTTP/1.1" 404 511 "-" "Mozilla/5. ...
show more
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /var/www/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /var/www/html/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /current/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /release/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [19/Oct/2026:01:41:39 +0200] "GET /releases/.env HTTP/1.1" 404 511 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.140.246 - - [19/Oct/20
show less
Web App Attack
Hacking
🇨🇭
Origon
2026-10-18 23:01:25
(3 days ago)
http-sensitive-files - IP: 34.154.140.246 - time="2026-10-19T01:01:25+02:00" level=info msg="(555f6 ...
show more
http-sensitive-files - IP: 34.154.140.246 - time="2026-10-19T01:01:25+02:00" level=info msg="(555f66b4f6a74558bc11e3f93469658es8App0Mcc0TKEeje/crowdsec) crowdsecurity/http-sensitive-files by ip 34.154.140.246 (IT/396982) : 4h ban on Ip 34.154.140.246" module=db
show less
Web App Attack
🇳🇱
Site.eu
2026-10-18 22:53:34
(3 days ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
Petros Stefanakis
2026-10-18 20:23:04
(3 days ago)
(mod_security) mod_security triggered on hostname [redacted] 34.154.140.246 (IT/Italy/246.140.154.34 ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.154.140.246 (IT/Italy/246.140.154.34.bc.googleusercontent.com)
show less
SQL Injection
🇨🇿
akac
2026-10-18 20:02:32
(3 days ago)
Web vulnerability scanning: HTTP/1.1 GET /.git/config
Hacking
Brute-Force
Bad Web Bot
Web App Attack