🇦🇺
clapper
2026-07-27 19:04:18
(6 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.242.36.149 (IE/Ireland/ec2-34-242-36-149.eu- ...
show more
(mod_security) mod_security (id:949110) triggered by 34.242.36.149 (IE/Ireland/ec2-34-242-36-149.eu-west-1.compute.amazonaws.com): 5 in the last 600 secs; ID: rub
show less
Brute-Force
Bad Web Bot
🇮🇩
securejdprop
2026-07-27 17:36:20
(8 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files.
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 17:29:27
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 13:29:20.862516 2026] [security2:error] [pid 2270410:tid 2270443] [client 34.242.36.149:52288] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.priyom.us"] [uri "/.git/config"] [unique_id "ameVcLOdhiWD9q26qOqjSgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 14:58:14
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:58:08.064366 2026] [security2:error] [pid 1536712:tid 1536712] [client 34.242.36.149:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.plaiatech.com"] [uri "/.env.txt"] [unique_id "amdyAFK7242Lg6VnPILOPQAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 14:39:41
(11 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 10:39:35.967469 2026] [security2:error] [pid 31151:tid 31151] [client 34.242.36.149:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.pixacast.com"] [uri "/.git/config"] [unique_id "amdtpxYcsaK1fgyi0mzUgQAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Blexyel
2026-07-27 14:19:08
(11 hours ago)
34.242.36.149 - - [27/Jul/2026:16:19:07 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 ...
show more
34.242.36.149 - - [27/Jul/2026:16:19:07 +0200] "GET /.git/config HTTP/1.1" 404 120 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-07-27 12:36:46
(13 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.comp ...
show more
(mod_security) mod_security (id:210492) triggered by 34.242.36.149 (ec2-34-242-36-149.eu-west-1.compute.amazonaws.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jul 27 08:36:38.845876 2026] [security2:error] [pid 16967:tid 16967] [client 34.242.36.149:59910] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.perlcreative.com"] [uri "/.git/config"] [unique_id "amdQ1jJCvSsVjdRy524GBQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
febrian.de
2026-07-27 08:34:10
(17 hours ago)
Malicious HTTP(S) probing detected by Fail2Ban
Web App Attack
2026-07-27 06:58:19
(18 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
2026-07-27 04:56:36
(21 hours ago)
Multiple web server 400 error codes from same source ip
Web App Attack
2026-07-26 05:05:52
(1 day ago)
Blocked: Reason='Vulnerability probing — PHP scan detected (41/60 min)'; Requests=41
Port Scan
🇮🇹
VHosting
2026-07-24 05:05:06
(3 days ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
🇩🇪
Skyrider
2026-07-24 04:42:53
(3 days ago)
Nginx: HTTP 4xx probe/scan attempts. Automated fail2ban report.
Bad Web Bot
Web App Attack