Anonymous
2026-09-11 13:41:04
(1 hour ago)
Banned by Fail2Ban on server
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 12:58:09
(2 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 08:58:02.354910 2026] [security2:error] [pid 15423:tid 15423] [client 34.175.249.37:45060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "efgenios.com"] [uri "/.git/config"] [unique_id "aqP62gPYsbqcE24k3dQrLAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
JaRoNL
2026-09-11 12:31:50
(2 hours ago)
34.175.249.37 - - \[11/Sep/2026:05:53:16 +0200\] "GET /.git/config HTTP/1.1" 301 692 "-" "Mozilla/5. ...
show more
34.175.249.37 - - \[11/Sep/2026:05:53:16 +0200\] "GET /.git/config HTTP/1.1" 301 692 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.249.37 - - \[11/Sep/2026:05:53:16 +0200\] "GET /.env HTTP/1.1" 301 678 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.249.37 - - \[11/Sep/2026:05:53:16 +0200\] "GET /.env.local HTTP/1.1" 301 690 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.249.37 - - \[11/Sep/2026:05:53:16 +0200\] "GET /.env.production HTTP/1.1" 301 700 "-" "Mozilla/5.0 \(Macintosh\; Intel Mac OS X 10_15_7\) AppleWebKit/537.36 \(KHTML, like Gecko\) Chrome/131.0.0.0 Safari/537.36"
34.175.249.37 - - \[11/Sep/2026:05:53:
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 11:08:15
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 07:08:10.339319 2026] [security2:error] [pid 19171:tid 19171] [client 34.175.249.37:58370] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "effectivefirearms.com"] [uri "/.git/config"] [unique_id "aqPhGnDpRM9GqrJwhfb2awAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-11 09:47:22
(5 hours ago)
Restricted File Access Attempt. Matched phrase ".git/" at REQUEST_FILENAME. (930130-196)
Hacking
Web App Attack
๐ญ๐บ
miszterx.hu
2026-09-11 06:30:02
(8 hours ago)
XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_ip ...
show more
XORP (haproxy): 12x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
๐ท๐ธ
pexodelic
2026-09-11 06:10:25
(9 hours ago)
Automated report from web and SSH server logs: 175 requests probing for exposed secrets (.env, .git, ...
show more
Automated report from web and SSH server logs: 175 requests probing for exposed secrets (.env, .git, config files); 272 distinct non-existent paths requested (wordlist scanning); 275 HTTP 4xx responses. First reported 2026-09-11 00:05 UTC, last reported 2026-09-11 03:05 UTC; counts cover the current log rotation window.
show less
Hacking
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-09-11 04:04:56
(11 hours ago)
15.659 requests in 1 hour (1mo3w2d)
Brute-Force
Bad Web Bot
๐ณ๐ฑ
Site.eu
2026-09-11 04:00:11
(11 hours ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
Mangelot Hosting
2026-09-11 03:56:30
(11 hours ago)
(modsecurity) srv101 ModSecurity 34.175.249.37 (37.249.175.34.bc.googleusercontent.com): 30 in the l ...
show more
(modsecurity) srv101 ModSecurity 34.175.249.37 (37.249.175.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐ท๐ด
clauss
2026-09-11 03:47:16
(11 hours ago)
34.175.249.37 - - [11/Sep/2026:06:47:14 +0300] "GET /phpinfo.php HTTP/2.0" 404 1821 "-" "Mozilla/5.0 ...
show more
34.175.249.37 - - [11/Sep/2026:06:47:14 +0300] "GET /phpinfo.php HTTP/2.0" 404 1821 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.175.249.37 - - [11/Sep/2026:06:47:15 +0300] "GET /info.php HTTP/2.0" 404 1819 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Anonymous
2026-09-11 03:45:44
(11 hours ago)
[server.tmg.gr] httpd-config-scan: sites=www.eemi.gr; logs=/var/log/httpd/domains/eemi.gr.log; sampl ...
show more
[server.tmg.gr] httpd-config-scan: sites=www.eemi.gr; logs=/var/log/httpd/domains/eemi.gr.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-11 03:14:11
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.175.249.37 (37.249.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 10 23:14:03.687360 2026] [security2:error] [pid 25455:tid 25455] [client 34.175.249.37:34570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "eeinspect.net"] [uri "/.git/config"] [unique_id "aqNx-z4fuzbRq7CgXDthKgAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-11 03:07:51
(12 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-09-11 03:07:39
(12 hours ago)
Excessive 404/403 errors
Brute-Force