Anonymous
2026-11-07 10:22:59
UTC ·
(3 hours ago)
FortiWeb WAF: 60 attacks detected. Threat Score: 12150. Types: Client Management(30), Block IP List(30). Origin: France.
Web App Attack
🇸🇪
vaia.cloud
2026-11-07 04:25:02
UTC ·
(9 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇮🇹
CoreTech srl
2026-11-07 04:19:45
UTC ·
(9 hours ago)
[DC: IP:151.1.252.27] ntopng alert: blacklisted_client_contact
Hacking
🇳🇱
Alt255
2026-11-07 04:12:32
UTC ·
(9 hours ago)
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.155.37.42 - - [07/Nov/2026:05:12:30 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
[ti-22al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.155.37.42 - - [07/Nov/2026:05:12:30 +0100] "GET /.git/config HTTP/1.1" 404 418 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇦🇺
greenhost.com.au
2026-11-07 04:07:59
UTC ·
(10 hours ago)
web application attack (26 malicious requests flagged/blocked by ModSecurity CRS) against 1 server(s) in the last hour. Detected by Wazuh SIEM (automatic report).
Web App Attack
🇩🇪
rh24
2026-11-07 02:29:55
UTC ·
(11 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.155.37.42 (FR/France/42.37.155.34.bc.googleusercontent.com): (CF_ENABLE)
SQL Injection
🇬🇧
andypiper
2026-11-07 02:00:10
UTC ·
(12 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
🇩🇪
netclix.gr
2026-11-07 01:16:49
UTC ·
(12 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.155.37.42 (FR/France/42.37.155.34.bc.googleusercontent.com)
SQL Injection
🇺🇸
TPI-Abuse
2026-11-07 00:47:30
UTC ·
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.37.42 (42.37.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:47:27.050946 2026] [security2:error] [pid 8617:tid 861 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.37.42 (42.37.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 19:47:27.050946 2026] [security2:error] [pid 8617:tid 8617] [client 34.155.37.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "easy-byte.net"] [uri "/.git/config"] [unique_id "au51H5QHgT4NBrRveCJVcwAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
EmilGH
2026-11-06 23:41:48
UTC ·
(14 hours ago)
34.155.37.42 - - [06/Nov/2026:23:41:43 +0000] "GET /.git/config HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.37.42 - - [06/Nov/2026:23:41:44 +0000] "GET ...
show more
34.155.37.42 - - [06/Nov/2026:23:41:43 +0000] "GET /.git/config HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.37.42 - - [06/Nov/2026:23:41:44 +0000] "GET /.env HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.37.42 - - [06/Nov/2026:23:41:44 +0000] "GET /.env.local HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.37.42 - - [06/Nov/2026:23:41:44 +0000] "GET /.env.production HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.155.37.42 - - [06/Nov/2026:23:41:44 +0000] "GET /.env.staging HTTP/1.1" 403 521 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.
...
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-06 22:57:01
UTC ·
(15 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇮🇩
aaKenshin
2026-11-06 20:04:44
UTC ·
(18 hours ago)
Suspicious activity detected from IP 34.155.37.42 based on web server logs.
Sample logs:
[easetrsudainun.] 34.155.37.42 - - [07/Nov/2026:04:04:40 +0800] "GET /.env.bak HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, ...
show more
Suspicious activity detected from IP 34.155.37.42 based on web server logs.
Sample logs:
[easetrsudainun.] 34.155.37.42 - - [07/Nov/2026:04:04:40 +0800] "GET /.env.bak HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[easetrsudainun.] 34.155.37.42 - - [07/Nov/2026:04:04:40 +0800] "GET /.env.remote HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
[easetrsudainun.] 34.155.37.42 - - [07/Nov/2026:04:04:40 +0800] "GET /.env.save HTTP/1.1" 404 181 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
Reported automatically by fail2ban service.
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 17:19:25
UTC ·
(20 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.155.37.42 (42.37.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:19:21.238396 2026] [security2:error] [pid 30722:tid 30 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.155.37.42 (42.37.155.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:19:21.238396 2026] [security2:error] [pid 30722:tid 30722] [client 34.155.37.42:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "earscript.net"] [uri "/.git/config"] [unique_id "au4MGUtTrMHdywdGTVX_SQAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
danieljamesbertrand
2026-11-06 11:13:42
UTC ·
(1 day ago)
fail2ban jail=scanner-permanent on canadapaywall.com (automatic report; categories 19,21)
Bad Web Bot
Web App Attack
🇺🇸
maxasp.net
2026-11-06 11:08:45
UTC ·
(1 day ago)
F5 Connection Limit to atl-ssl1.maximtech.com 150 connections on a fixed interval of 2 (Oldest Hit 54 seconds)
DDoS Attack