🇩🇪
klaus_ph
2026-09-28 00:32:13
UTC ·
(1 month ago)
2026-09-27 01:03:34,476 fail2ban.actions [8144]: NOTICE [ipblocklist] Ban 34.173.154.250
...
Bad Web Bot
🇩🇪
klaus_ph
2026-09-27 03:37:28
UTC ·
(1 month ago)
2026-09-26 00:51:27,574 fail2ban.actions [594716]: NOTICE [ipblocklist] Ban 34.173.154.250
...
Bad Web Bot
🇺🇸
conrad10781
2026-09-24 08:03:20
UTC ·
(1 month ago)
nginx-4xx
Web App Attack
🇺🇸
craudiovizai
2026-09-24 06:30:36
UTC ·
(1 month ago)
Automated honeypot detection. honeypot against a Next.js application. Paths: /.git/config. Blocked at the edge.
Web App Attack
Bad Web Bot
🇺🇸
Gabriel Camargo
2026-09-24 05:24:52
UTC ·
(1 month ago)
34.173.154.250 - - [24/Sep/2026:00:24:52 -0500] "GET /public/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.173.154.250 - - [24/Sep/2026:00:24:52 -0500] "GET /www/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.173.154.250 - - ...
show more
34.173.154.250 - - [24/Sep/2026:00:24:52 -0500] "GET /public/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.173.154.250 - - [24/Sep/2026:00:24:52 -0500] "GET /www/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
34.173.154.250 - - [24/Sep/2026:00:24:52 -0500] "GET /site/.git/config HTTP/1.1" 301 178 "-" "crusader-worker/1.0"
...
show less
Brute-Force
SSH
🇳🇱
e.fierstra
2026-09-24 05:09:11
UTC ·
(1 month ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:55:34
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:55:31.610627 2026] [security2:error] [pid 15982:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:55:31.610627 2026] [security2:error] [pid 15982:tid 15982] [client 34.173.154.250:52532] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "croixlac.com"] [uri "/var/www/.git/config"] [unique_id "arStQ4aUU9Gd1xlsu1p0IwAAADM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:32:58
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:32:51.073296 2026] [security2:error] [pid 7559:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:32:51.073296 2026] [security2:error] [pid 7559:tid 7559] [client 34.173.154.250:40470] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "creeation.com"] [uri "/app/.git/config"] [unique_id "arSn84Okzpg-llAPRhKkPgAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 04:00:55
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:00:50.700440 2026] [security2:error] [pid 25141:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 00:00:50.700440 2026] [security2:error] [pid 25141:tid 25141] [client 34.173.154.250:47114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.softwarezz.net"] [uri "/app/.git/config"] [unique_id "arSgcgNbmLWzhgFPXLZc0wAAAIU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 02:43:20
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:43:15.212379 2026] [security2:error] [pid 22913:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 22:43:15.212379 2026] [security2:error] [pid 22913:tid 22913] [client 34.173.154.250:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.swarnar.com"] [uri "/htdocs/.git/config"] [unique_id "arSOQ56EEonrSJtmYr3ojgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
4server
2026-09-24 01:45:15
UTC ·
(1 month ago)
[ThuSep2403:45:08.1122252026][security2:error][pid1500497:tid1501065][client34.173.154.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"9607 ...
show more
[ThuSep2403:45:08.1122252026][security2:error][pid1500497:tid1501065][client34.173.154.250:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Matchedphrase\".git\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"610\"][id\"960720\"][msg\"Forbiddenfileaccess\"][hostname\"cpcalendars.buonviaggio.ch\"][uri\"/wordpress/.git/config\"][unique_id\"arSApPjmJXLgtV7_Kv09NgAAAEE\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 00:57:31
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 20:57:23.611073 2026] [security2:error] [pid 15612:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 20:57:23.611073 2026] [security2:error] [pid 15612:tid 15612] [client 34.173.154.250:60402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.nutandboltguy.com"] [uri "/public/.git/config"] [unique_id "arR1c3fft_9lqudaTpy9xgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇷
radardatelecom
2026-09-23 22:23:08
UTC ·
(1 month ago)
Blocked by Radar da Telecom firewall — abuseipdb
Bad Web Bot
Web App Attack
🇳🇱
homeshowdomain.nl
2026-09-23 22:04:06
UTC ·
(1 month ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-22.
Web App Attack
SSH
Hacking
🇺🇸
TPI-Abuse
2026-09-23 21:20:34
UTC ·
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 17:20:27.508373 2026] [security2:error] [pid 13325:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.173.154.250 (250.154.173.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 17:20:27.508373 2026] [security2:error] [pid 13325:tid 13325] [client 34.173.154.250:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cloudex.click"] [uri "/www/.git/config"] [unique_id "arRCm2-m7Jci-KlTpYxY9QAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
