🇳🇱
Mangelot Hosting
2026-09-16 04:56:45
(7 hours ago)
(modsecurity) srv201 ModSecurity 34.95.162.39 (BR/Brazil/39.162.95.34.bc.googleusercontent.com): 30 ...
show more
(modsecurity) srv201 ModSecurity 34.95.162.39 (BR/Brazil/39.162.95.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇩🇪
LRob
2026-09-16 04:54:27
(7 hours ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+4 more) | 2026-09-16 04:54 UTC
show less
Hacking
Web App Attack
🇺🇸
deskpass.com
2026-09-16 03:51:33
(8 hours ago)
GET /core/phpinfo.php
Web App Attack
🇦🇺
rubixstudios
2026-09-16 02:55:26
(9 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇩🇪
dave
2026-09-16 01:41:51
(10 hours ago)
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity ...
show more
threat-feed-sync observed repeated abuse from this IP after local filtering. scenarios=crowdsecurity/appsec-vpatch,crowdsecurity/vpatch-CVE-2025-55182,crowdsecurity/vpatch-env-access,crowdsecurity/vpatch-git-config,custom/traefik-sensitive-path-probe observed_by=1_hosts hit_count=7 first_seen=2026-09-16T01:41:50Z last_seen=2026-09-16T01:41:51Z
show less
Web App Attack
🇺🇸
Aurealize
2026-09-16 01:22:06
(10 hours ago)
Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.git/con ...
show more
Automated Sensitive File discovery attempt detected by a Cloudflare WAF custom rule. Path: /.git/config.
show less
Web App Attack
Hacking
🇩🇪
BlueWire Hosting
2026-09-16 01:11:03
(10 hours ago)
High-confidence malicious configuration/VCS probe
Web App Attack
🇳🇱
Site.eu
2026-09-16 00:26:11
(11 hours ago)
Excessive 404/403 errors
Brute-Force
2026-09-16 00:10:07
(11 hours ago)
| Suspicious URL access.
Web App Attack
Hacking
SQL Injection
2026-09-15 23:26:08
(12 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 23:22:18
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.162.39 (39.162.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.162.39 (39.162.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 19:22:11.229858 2026] [security2:error] [pid 9524:tid 9524] [client 34.95.162.39:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webfrog.ws"] [uri "/.git/config"] [unique_id "aqnTI2Rim6NSqRzeziS_RwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
dominioz
2026-09-15 22:27:35
(13 hours ago)
2026-09-15 22:26:50 GET /.env - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15 ...
show more
2026-09-15 22:26:50 GET /.env - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-09-15 22:26:50 GET /.env.local - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-09-15 22:26:51 GET /.env.production - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-09-15 22:26:51 GET /.env.staging - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-09-15 22:26:51 GET /.env.development - - 34.95.162.39 HTTP/1.1 Mozilla/5.0+(Macintosh;+Intel+Mac+OS+X+10_15_7)+AppleWebKit/537.36+(KHTML,+like+Gecko)+Chrome/131.0.0.0+Safari/537.36 - 404 245
2026-09-15 22:26:51 GET /.env.test - - 34.9
...
show less
Web App Attack
2026-09-15 22:23:16
(13 hours ago)
Web application attack detected.
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:34:30
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.95.162.39 (39.162.95.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.95.162.39 (39.162.95.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:34:25.220241 2026] [security2:error] [pid 26065:tid 26065] [client 34.95.162.39:49578] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webersource.com"] [uri "/.git/config"] [unique_id "aqm54dpWKlfraWPJeGhY0AAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-09-15 20:47:28
(15 hours ago)
20 attempts against mh_ha-misbehave-ban on bud
Brute-Force
Bad Web Bot
Web App Attack