๐ง๐ช
cmbplf
2026-09-24 11:43:35
(4 hours ago)
4.063 requests with url.path *.env
692 requests with url.path *phpinfo.php
Brute-Force
Bad Web Bot
๐ง๐ท
dominioz
2026-09-23 13:56:13
(1 day ago)
2026-09-23 13:56:07 GET /.git/config - - 34.50.86.147 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+ ...
show more
2026-09-23 13:56:07 GET /.git/config - - 34.50.86.147 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 301 578
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-22 17:38:34
(1 day ago)
Web attack/malicious scanning detected
Web App Attack
๐ณ๐ฑ
Savvii
2026-09-22 16:40:51
(1 day ago)
20 attempts against mh_ha-misbehave-ban on ceres
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-22 03:06:30
(2 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-22 00:07:32
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.86.147 (147.86.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.86.147 (147.86.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:07:11.183063 2026] [security2:error] [pid 25981:tid 25981] [client 34.50.86.147:35988] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.votmuli.com.greenlight.us"] [uri "/.git/config"] [unique_id "arHGr0zv03n8PLTAij9RrQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 21:09:03
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
Anonymous
2026-09-21 16:33:12
(2 days ago)
[Mon Sep 21 12:32:43.807009 2026] [authz_core:error] [pid 20408] [client 34.50.86.147:53598] AH01630 ...
show more
[Mon Sep 21 12:32:43.807009 2026] [authz_core:error] [pid 20408] [client 34.50.86.147:53598] AH01630: client denied by server configuration: /var/www/victorbiro/vendor/.env
[Mon Sep 21 12:33:11.181132 2026] [access_compat:error] [pid 20216] [client 34.50.86.147:33108] AH01797: client denied by server configuration: /var/www/victorbiro/phpinfo.php
[Mon Sep 21 12:33:11.419895 2026] [access_compat:error] [pid 20216] [client 34.50.86.147:33108] AH01797: client denied by server configuration: /var/www/victorbiro/info.php
[Mon Sep 21 12:33:11.658059 2026] [access_compat:error] [pid 20216] [client 34.50.86.147:33108] AH01797: client denied by server configuration: /var/www/victorbiro/php.php
[Mon Sep 21 12:33:11.896459 2026] [access_compat:error] [pid 20216] [client 34.50.86.147:33108] AH01797: client denied by server configuration: /var/www/victorbiro/i.php
[Mon Sep 21 12:33:12.134523 2026] [access_compat:error] [pid 20216] [client 34.50.86.147:33108] AH01797: client denied by server configuration: /var/www/victorb
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
IDS
2026-09-21 09:28:43
(3 days ago)
34.50.86.147 - - [21/Sep/2026:05:28:30 -0400] "GET /.__browsercheck/challenge.php?return=/.git/confi ...
show more
34.50.86.147 - - [21/Sep/2026:05:28:30 -0400] "GET /.__browsercheck/challenge.php?return=/.git/config HTTP/1.1" 200 3178 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.86.147 - - [21/Sep/2026:05:28:31 -0400] "GET /.__browsercheck/challenge.php?return=/.env HTTP/1.1" 200 3171 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.86.147 - - [21/Sep/2026:05:28:31 -0400] "GET /.__browsercheck/challenge.php?return=/.env.local HTTP/1.1" 200 3176 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.86.147 - - [21/Sep/2026:05:28:32 -0400] "GET /.__browsercheck/challenge.php?return=/.env.production HTTP/1.1" 200 3179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.50.86.147 - - [21/Sep/2026:05:28:32 -0400] "GET /.__browsercheck/challenge.php?return
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
consul.to
2026-09-21 02:23:04
(3 days ago)
Web attack/malicious scanning detected
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 19:17:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.50.86.147 (147.86.50.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.50.86.147 (147.86.50.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:17:34.470344 2026] [security2:error] [pid 12190:tid 12273] [client 34.50.86.147:41608] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.wls.bestofthis.com"] [uri "/.git/config"] [unique_id "arAxTrhNAhK-0EuLa9hyJAAAAFI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-20 19:15:08
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
wlt-blocker
2026-09-20 17:35:32
(3 days ago)
Unauthorized access to webpage admin
Web App Attack