๐ซ๐ฎ
JLKnoch Software GmbH
2026-09-18 19:41:54
(16 minutes ago)
CrowdSec crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
๐ง๐ท
dominioz
2026-09-18 17:49:55
(2 hours ago)
2026-09-18 17:49:23 GET /.git/config - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+App ...
show more
2026-09-18 17:49:23 GET /.git/config - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 574
2026-09-18 17:49:23 GET /.env - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
2026-09-18 17:49:23 GET /.env - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
2026-09-18 17:49:24 GET /.env.local - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(X11;+Linux+x86_64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
...
show less
Web App Attack
๐ง๐ท
dominioz
2026-09-18 17:22:55
(2 hours ago)
2026-09-18 17:22:25 GET /.git/config - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64 ...
show more
2026-09-18 17:22:25 GET /.git/config - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 574
2026-09-18 17:22:25 GET /.env - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
2026-09-18 17:22:25 GET /.env.local - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
2026-09-18 17:22:27 GET /.env.production - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
2026-09-18 17:22:27 GET /.env.staging - - 34.176.162.222 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 593
...
show less
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-18 16:56:21
(3 hours ago)
Multiple WAF Violations
Web App Attack
๐ช๐ธ
scaballe
2026-09-18 15:52:14
(4 hours ago)
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-18 15:22:58
(4 hours ago)
Excessive 404/403 errors
Brute-Force
๐ณ๐ฑ
ConsulHosting
2026-09-18 14:46:55
(5 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ฉ๐ช
BlueWire Hosting
2026-09-18 14:28:27
(5 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
๐ณ๐ฑ
middelkoopcc
2026-09-18 13:52:00
(6 hours ago)
2026-09-18 15:50:03 GET /.git/config [301] && 2026-09-18 15:50:03 GET /.env [301] && 2026-09-18 15:5 ...
show more
2026-09-18 15:50:03 GET /.git/config [301] && 2026-09-18 15:50:03 GET /.env [301] && 2026-09-18 15:50:05 GET /.env.bak [301] && 233 more within 20 minutes
show less
Web App Attack
๐ณ๐ฑ
Webhoster
2026-09-18 13:32:06
(6 hours ago)
CrowdSec detected crowdsecurity/http-sensitive-files on a monitored service.
Web App Attack
๐ฐ๐ท
doll.gl
2026-09-18 12:58:30
(6 hours ago)
CrowdSec: Ip 34.176.162.222 performed 'crowdsecurity/http-sensitive-files' (5 events over 2.18273696 ...
show more
CrowdSec: Ip 34.176.162.222 performed 'crowdsecurity/http-sensitive-files' (5 events over 2.182736961s) at 2026-09-18 12:58:28.518238585 +0000 UTC (scenario: crowdsecurity/http-sensitive-files)
show less
Port Scan
Web App Attack
๐ณ๐ฑ
Webhoster
2026-09-18 12:33:51
(7 hours ago)
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.176.162.222. Evidence: 2 ...
show more
HTTP sensitive-file probing detected by Fail2Ban (traefik-http).
Source: 34.176.162.222. Evidence: 2 matching request(s).
UTC: 2026-09-18 12:33:50 to 2026-09-18 12:33:50.
Observed requests (query strings omitted):
GET /.git/config -> HTTP 403 (1x)
GET /.env -> HTTP 403 (1x)
show less
Web App Attack
๐ฐ๐ท
doll.gl
2026-09-18 11:57:08
(8 hours ago)
CrowdSec: Ip 34.176.162.222 performed 'crowdsecurity/http-sensitive-files' (5 events over 2.35606089 ...
show more
CrowdSec: Ip 34.176.162.222 performed 'crowdsecurity/http-sensitive-files' (5 events over 2.35606089s) at 2026-09-18 11:57:06.634091065 +0000 UTC (scenario: crowdsecurity/http-sensitive-files)
show less
Port Scan
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-18 11:56:36
(8 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
Anonymous
2026-09-18 11:52:38
(8 hours ago)
34.176.162.222 - - [18/Sep/2026:13:52:38 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5. ...
show more
34.176.162.222 - - [18/Sep/2026:13:52:38 +0200] "GET /.git/config HTTP/1.1" 200 3264 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Port Scan
Hacking
Brute-Force
Bad Web Bot
Web App Attack
SSH