Anonymous
2026-09-02 16:13:07
UTC ·
(2 months ago)
IP matched detection query more than 2 hosts and only bad rq long ban.
Brute-Force
Web App Attack
Hacking
🇮🇹
VHosting
2026-09-01 13:25:03
UTC ·
(2 months ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇦🇺
clapper
2026-09-01 13:13:22
UTC ·
(2 months ago)
(mod_security) mod_security (id:949110) triggered by 34.32.115.53 (DE/Germany/53.115.32.34.bc.googleusercontent.com): 3 in the last 3600 secs; ID: LUC
Brute-Force
Bad Web Bot
🇫🇷
PacketFilter
2026-09-01 12:56:48
UTC ·
(2 months ago)
Fail2Ban
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 12:27:13
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:27:09.661175 2026] [security2:error] [pid 15688:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 08:27:09.661175 2026] [security2:error] [pid 15688:tid 15688] [client 34.32.115.53:50360] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lubbockknights.com"] [uri "/.git/config"] [unique_id "apbEnTsYWoOfHm8yBpAyewAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Andrew
2026-09-01 11:23:41
UTC ·
(2 months ago)
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.git/config HTTP/1.1" 404 20277 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.115.53 - - [01/Sep/2026:12:23:40 +01 ...
show more
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.git/config HTTP/1.1" 404 20277 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.env HTTP/1.1" 404 18354 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.env.local HTTP/1.1" 404 18360 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.env.production HTTP/1.1" 404 18365 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.115.53 - - [01/Sep/2026:12:23:40 +0100] "GET /.env.staging HTTP/1.1" 404 18362 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Ge
...
show less
Hacking
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-01 11:06:02
UTC ·
(2 months ago)
[01/Sep/2026:14:06:01 +0300] -- 34.32.115.53 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
Bad Web Bot
Web App Attack
🇫🇷
assassin78476
2026-09-01 07:08:37
UTC ·
(2 months ago)
[2026-09-01 09:08:37] Attempted attack (SECRETSHUNTER) by IP 34.32.115.53 (Reported by SysWarden https://github.com/duggytuxy/syswarden)
Port Scan
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 05:31:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:31:33.468471 2026] [security2:error] [pid 18001:tid 18 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 01:31:33.468471 2026] [security2:error] [pid 18001:tid 18001] [client 34.32.115.53:51690] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lsippell.com"] [uri "/.git/config"] [unique_id "apZjNSl4m4tnAv3u_zxOxQAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-01 04:50:12
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:50:06.732247 2026] [security2:error] [pid 19816:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.115.53 (53.115.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 00:50:06.732247 2026] [security2:error] [pid 19816:tid 19816] [client 34.32.115.53:34520] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lsd36.com"] [uri "/.git/config"] [unique_id "apZZfjM9_yM0YAQdsCxchQAAADg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-01 03:42:36
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
kkw
2026-09-01 03:32:48
UTC ·
(2 months ago)
[REDACTED] 34.32.115.53 - - [01/Sep/2026:05:32:47 +0200] "GET /.git/config HTTP/1.1" 404 3994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensit ...
show more
[REDACTED] 34.32.115.53 - - [01/Sep/2026:05:32:47 +0200] "GET /.git/config HTTP/1.1" 404 3994 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
🇫🇷
LRob
2026-09-01 03:05:59
UTC ·
(2 months ago)
Malicious web request: probing for secrets, traversal or a known exploit path | method: GET | path: /.git/config | 2026-09-01 03:05 UTC
Hacking
Web App Attack
🇩🇪
LRob
2026-09-01 01:46:01
UTC ·
(2 months ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-09-01 01:46 UTC
Hacking
Web App Attack
🇳🇱
Site.eu
2026-09-01 01:35:25
UTC ·
(2 months ago)
Excessive multi-domain requests
Brute-Force