🇧🇷
govfacil.app
2026-09-03 07:34:57
(5 hours ago)
(CT) IP 34.175.59.184 (ES/Spain/184.59.175.34.bc.googleusercontent.com) found to have 542 connection ...
show more
(CT) IP 34.175.59.184 (ES/Spain/184.59.175.34.bc.googleusercontent.com) found to have 542 connections; Ports: *; Direction: inout; Trigger: CT_LIMIT; Logs: tcp: 34.175.59.184:55670 -> 200.36.158.50:443 (TIME_WAIT)
tcp: 34.175.59.184:56700 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:59884 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:59864 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:56990 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:59026 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:60512 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:57616 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:59894 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:60548 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:57368 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:55888 -> 200.36.158.50:443 (TIME_WAIT)
tcp: 34.175.59.184:59996 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34.175.59.184:56088 -> 200.36.158.50:443 (ESTABLISHED)
tcp: 34. [truncated]
show less
Brute-Force
🇳🇱
homeshowdomain.nl
2026-09-02 22:00:15
(15 hours ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-01.
show less
Web App Attack
SSH
Hacking
🇳🇱
Cloud86 B.V.
2026-09-01 23:52:05
(1 day ago)
categories: DDoS Attack
DDoS Attack
2026-09-01 13:55:34
(1 day ago)
Blocked by ModSec and CSF
Port Scan
🇺🇸
TPI-Abuse
2026-09-01 13:49:22
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 09:49:17.581264 2026] [security2:error] [pid 11629:tid 11629] [client 34.175.59.184:33608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.hecticred.com"] [uri "/wp-config.php.bak"] [unique_id "apbX3adelR8rXuDa1hPddwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-01 11:23:01
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇺🇸
TPI-Abuse
2026-09-01 10:59:38
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:59:32.593547 2026] [security2:error] [pid 4131:tid 4131] [client 34.175.59.184:56514] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webdisk.crittergetterpestcontrol.com"] [uri "/.env.old"] [unique_id "apawFN2vaRvH_K3ERnbw4QAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
Halux
2026-09-01 10:09:30
(2 days ago)
34.175.59.184 Web Application Firewall multiple violations
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 10:06:05
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 06:05:58.705176 2026] [security2:error] [pid 25018:tid 25018] [client 34.175.59.184:44290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "upperbearcreek.net"] [uri "/.env.bak"] [unique_id "apajhsyzlIb1ss6VUn0XTQAAADQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-09-01 09:50:59
(2 days ago)
URL Probing: /.env
Web App Attack
🇩🇪
ddobko
2026-09-01 09:42:48
(2 days ago)
Bad Web Bot
Web App Attack
2026-09-01 09:30:04
(2 days ago)
Bot / scanning and/or hacking attempts: GET /_ignition/health-check HTTP/1.1, GET /.env.backup HTTP/ ...
show more
Bot / scanning and/or hacking attempts: GET /_ignition/health-check HTTP/1.1, GET /.env.backup HTTP/1.1, GET /actuator/configprops HTTP/1.1, GET /.env.save HTTP/1.1, GET /env HTTP/1.1, GET /.env.local HTTP/1.1, GET /storage/logs/laravel.log HTTP/1.1, GET /.env HTTP/1.1, GET /.env.production HTTP/1.1, GET /crusader-404-probe HTTP/1.1, GET /wp-config.php~ HTTP/1.1, GET /.env.old HTTP/1.1, GET /actuator/env HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 08:22:21
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 04:22:13.815859 2026] [security2:error] [pid 30430:tid 30430] [client 34.175.59.184:45474] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "messengersforchrist.charity"] [uri "/.env.local"] [unique_id "apaLNYMj4Gt8k_RW8BLRuwAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-01 08:10:18
(2 days ago)
Scenarios: http-sensitive-files
Total requests: 19
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 07:43:42
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.59.184 (184.59.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 03:43:34.491762 2026] [security2:error] [pid 20671:tid 20671] [client 34.175.59.184:41014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ftp.stoneageartifacts.com"] [uri "/.env"] [unique_id "apaCJu8tsB2v1a1ERDjeIQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
