🇧🇾
lns.bz
2026-09-16 04:57:46
(1 month ago)
Too many 404 requests [BY]
Web App Attack
🇳🇱
Site.eu
2026-09-16 03:13:19
(1 month ago)
Excessive 404/403 errors
Brute-Force
🇳🇱
ConsulHosting
2026-09-16 02:27:21
(1 month ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
2026-09-16 02:24:04
(1 month ago)
Bot / scanning and/or hacking attempts: GET /test/phpinfo.php HTTP/1.1, GET /info HTTP/1.1, GET /p.p ...
show more
Bot / scanning and/or hacking attempts: GET /test/phpinfo.php HTTP/1.1, GET /info HTTP/1.1, GET /p.php HTTP/1.1, GET /debug.php HTTP/1.1, GET /old/phpinfo.php HTTP/1.1, GET /tmp/phpinfo.php HTTP/1.1, GET /public/phpinfo.php HTTP/1.1, GET /phpversion.php HTTP/1.1, GET /php-info.php HTTP/1.1, GET /dev/phpinfo.php HTTP/1.1, GET /_phpinfo.php HTTP/1.1, GET /admin/phpinfo.php HTTP/1.1, GET /transactional/.env HTTP/1.1, GET /pi.php HTTP/1.1, GET /mandrill/.env HTTP/1.1, GET /postmark/.env HTTP/1.1, GET /mailer/.env HTTP/1.1, GET /sparkpost/.env HTTP/1.1, GET /pinfo.php HTTP/1.1, GET /mailgun/.env HTTP/1.1, GET /brevo/.env HTTP/1.1, GET /smtp/.env HTTP/1.1, GET /i.php HTTP/1.1, GET /phpinfo HTTP/1.1, GET /sendgrid/.env HTTP/1.1, GET /mailjet/.env HTTP/1.1, GET /info.php HTTP/1.1, GET /sitemaps/.env HTTP/1.1, GET /email/.env HTTP/1.1, GET /cronlab/.env HTTP/1.1, GET /phpinfo.php HTTP/1.1, GET /bulk/.env HTTP/1.1, GET /ses/.env HTTP/1.1, GET /php.php HTTP/1.1, GET /test.php HTTP/1.1
show less
Hacking
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-09-16 02:05:09
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 22:39:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.179.158.67 (67.158.179.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.158.67 (67.158.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:39:33.931858 2026] [security2:error] [pid 15099:tid 15121] [client 34.179.158.67:33576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.entjeter.jtjservices.com"] [uri "/.git/config"] [unique_id "aqnJJTcwq0ftMfADcqHd1QAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-15 18:00:03
(1 month ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 08:46:03
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.179.158.67 (67.158.179.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.179.158.67 (67.158.179.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:45:58.674943 2026] [security2:error] [pid 19363:tid 19363] [client 34.179.158.67:47106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "prezence.com"] [uri "/.git/config"] [unique_id "aqkFxnl-8kUYHtw7UHokxAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Feelautom
2026-09-15 07:57:28
(1 month ago)
[FeelAutom Auto-Ban] PathScan: /.env.backup (Score: 200)
Port Scan
🇮🇹
VHosting
2026-09-15 06:15:04
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
zwebvigil
2026-09-15 04:57:15
(1 month ago)
34.179.158.67 [14/Sep/2026:21:57:13 -0700] "GET /.git/config HTTP/1.1" 404 196 "-" port=49168 "Mozi ...
show more
34.179.158.67 [14/Sep/2026:21:57:13 -0700] "GET /.git/config HTTP/1.1" 404 196 "-" port=49168 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "sip-origin=/" "-" "sip.<host>" 619
34.179.158.67 [14/Sep/2026:21:57:14 -0700] "GET /.env HTTP/1.1" 404 196 "-" port=49168 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "sip-origin=/" "-" "sip.<host>" 271
34.179.158.67 [14/Sep/2026:21:57:14 -0700] "GET /.env.local HTTP/1.1" 404 196 "-" port=49168 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "sip-origin=/" "-" "sip.<host>" 320
34.179.158.67 [14/Sep/2026:21:57:14 -0700] "GET /.env.production HTTP/1.1" 404 196 "-" port=49168 "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "sip-origin=/" "-" "sip.
show less
Web App Attack
2026-09-15 04:42:22
(1 month ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-09-15 04:26:48
(1 month ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack