🇺🇸
infra-monitor
2026-09-01 02:00:05
(8 hours ago)
Automated ban via infra-monitor: suspicious-probe
Port Scan
🇩🇪
ghostwarriors
2026-09-01 01:50:08
(8 hours ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
🇩🇪
yitzhaq
2026-09-01 01:28:24
(9 hours ago)
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env.uat HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Wi ...
show more
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env.uat HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env.dist HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env.swp HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env~ HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.149.246 - - [01/Sep/2026:03:28:20 +0200] "GET /.env1 HTTP/1.1" 404 512 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.88.149.246 -
show less
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-08-31 11:50:44
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 07:50:35.882200 2026] [security2:error] [pid 18007:tid 18007] [client 34.88.149.246:44044] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uklanor.com"] [uri "/.git/config"] [unique_id "apVqi0Y7-hNCxheUibqRQgAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-31 10:25:02
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-08-31 08:03:16
(1 day ago)
GET /.git/config HTTP/1.1
...
Web App Attack
🇩🇪
big-cloud.nl
2026-08-31 07:18:13
(1 day ago)
Try to access /.git/config
Web App Attack
🇳🇱
middelkoopcc
2026-08-31 07:17:01
(1 day ago)
2026-08-31 09:14:59 GET /.git/config [301] && 2026-08-31 09:14:59 GET /.env [301] && 2026-08-31 09:1 ...
show more
2026-08-31 09:14:59 GET /.git/config [301] && 2026-08-31 09:14:59 GET /.env [301] && 2026-08-31 09:15:02 GET /app/.env [301] && 216 more within 20 minutes
show less
Web App Attack
🇮🇹
VHosting
2026-08-31 06:40:03
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-08-31 05:16:54
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Aug 31 01:16:46.131907 2026] [security2:error] [pid 31259:tid 31259] [client 34.88.149.246:39464] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uhfcfoundation.org"] [uri "/.git/config"] [unique_id "apUOPuomjRbeUtNG8jWJ7gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-08-31 05:10:08
(1 day ago)
URL Probing: /public/.env
Web App Attack
🇳🇱
Site.eu
2026-08-31 04:26:59
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇺🇸
TPI-Abuse
2026-08-31 03:54:49
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.88.149.246 (246.149.88.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Aug 30 23:54:43.316208 2026] [security2:error] [pid 19483:tid 19483] [client 34.88.149.246:40576] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "uglybunnywinery.marshvineyards.com"] [uri "/.git/config"] [unique_id "apT7A9ftl6dK17wkEOnVeQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack