🇨🇭
🇨🇭 Hosting
2026-06-12 05:10:14
(1 day ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-06-12 02:16:46
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇬🇧
Bytemark
2026-06-11 21:08:22
(2 days ago)
34.176.191.92 - - [11/Jun/2026:22:08:21 +0100] "GET /internal/.env HTTP/1.1" 404 4332 "-" "Mozilla/5 ...
show more
34.176.191.92 - - [11/Jun/2026:22:08:21 +0100] "GET /internal/.env HTTP/1.1" 404 4332 "-" "Mozilla/5.0 (compatible; YandexBot/3.0; +http://yandex.com/bots)"
show less
Brute-Force
Web App Attack
🇫🇮
oh.mg
2026-06-11 17:25:16
(2 days ago)
[Thu Jun 11 19:25:15.921986 2026] [security2:error] [pid 2535268:tid 2535276] [client 34.176.191.92: ...
show more
[Thu Jun 11 19:25:15.921986 2026] [security2:error] [pid 2535268:tid 2535276] [client 34.176.191.92:0] [client 34.176.191.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "api.sup.coop"] [uri "/.env.backup.txt"] [unique_id "airveydVuBZwndkX-sq3SwAAAAY"]
[Thu Jun 11 19:25:16.027841 2026] [security2:error] [pid 2534841:tid 2534860] [client 34.176.191.92:0] [client 34.176.191.92] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [ver "OWASP_CRS/4.10.0-dev"] [tag
...
show less
Web App Attack
Bad Web Bot
🇳🇱
Cloud86 B.V.
2026-06-11 16:26:04
(2 days ago)
categories: DDoS Attack
DDoS Attack
🇫🇮
inlink.ltd
2026-06-11 13:43:01
(2 days ago)
dot file probe
Web App Attack
🇷🇺
DZBOT
2026-06-11 13:39:24
(2 days ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
🇩🇪
updown.io
2026-06-11 10:05:10
(2 days ago)
{"level":"info","ts":1781172309.6414154,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1781172309.6414154,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.176.191.92","remote_port":"34338","client_ip":"34.176.191.92","proto":"HTTP/1.1","method":"GET","host":"ponmlkjihgjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io","uri":"/.env.prod.bak","headers":{"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"],"User-Agent":["Mozilla/5.0 (X11; U; FreeBSD i386; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.207.0 Safari/532.0"]}},"bytes_read":0,"user_id":"","duration":0.00007283,"size":0,"status":308,"resp_headers":{"Location":["https://ponmlkjihgjihgc7402a95-6fc9-4756-b4e6-fa6c7eeb29c6.random.159.89.98.98.nip.io/.env.prod.bak"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1781172309.65329,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.176.191.92","remote_port":"34352","client_ip":"34.176.191.92","proto
...
show less
DDoS Attack
Web App Attack
🇦🇺
2000cn.com.au
2026-06-11 07:28:46
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
2026-06-11 05:58:47
(2 days ago)
(caddyscan) Scanner path probe from 34.176.191.92 (CL/Chile/92.191.176.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.176.191.92 (CL/Chile/92.191.176.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.176.191.92 - - [11/Jun/2026:05:58:43 +0000] "GET /.env.old HTTP/1.1"
[REDACTED] 200 2627 34.176.191.92 - - [11/Jun/2026:05:58:43 +0000] "GET /.env.dev HTTP/1.1"
[REDACTED] 200 2627 34.176.191.92 - - [11/Jun/2026:05:58:43 +0000] "GET /.env.production.bak HTTP/1.1"
[REDACTED] 200 2627 34.176.191.92 - - [11/Jun/2026:05:58:43 +0000] "GET /.env.local HTTP/1.1"
[REDACTED] 200 2627 34.176.191.92 - - [11/Jun/2026:05:58:43 +0000] "GET /.env.prod.bak HTTP/1.1"
show less
Port Scan
🇨🇭
🇨🇭 Hosting
2026-06-11 05:10:12
(2 days ago)
Automated WAF report: 125-150 blocked requests from this IP detected by our WAF.
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-06-10 22:01:37
(3 days ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on ...
show more
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-06-09.
show less
Web App Attack
SSH
Hacking
🇵🇱
dcnet
2026-06-10 22:00:26
(3 days ago)
FortiGate detected DOS attack from IPv4 address 34.176.191.92
DDoS Attack
🇳🇱
ConsulHosting
2026-06-10 21:58:59
(3 days ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-06-10 21:55:11
(3 days ago)
Bot / seems abusive / Apache connections: 104
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack