๐ฉ๐ช
Gwyneth Llewelyn
2026-10-21 00:19:34
(1 hour ago)
2026/10/21 01:19:21 [error] 2414#2414: *530191 access forbidden by rule, client: 34.32.75.177, serve ...
show more
2026/10/21 01:19:21 [error] 2414#2414: *530191 access forbidden by rule, client: 34.32.75.177, server: operadotejo.org, request: "GET /.env HTTP/2.0", host: "operadotejo.org"
34.32.75.177 - - [21/Oct/2026:01:19:21 +0100] "GET /.env HTTP/2.0" 403 138 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/10/21 01:19:30 [error] 2414#2414: *530256 access forbidden by rule, client: 34.32.75.177, server: operadotejo.org, request: "GET /app/.env HTTP/2.0", host: "operadotejo.org"
show less
Brute-Force
Web App Attack
๐ฉ๐ช
lespbaj
2026-10-21 00:05:57
(1 hour ago)
{"time":"2026-10-21T00:05:54+00:00","ip":"34.32.75.177","method":"GET","uri":"/.git/config","ua":"Mo ...
show more
{"time":"2026-10-21T00:05:54+00:00","ip":"34.32.75.177","method":"GET","uri":"/.git/config","ua":"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36","referer":""}
...
show less
Bad Web Bot
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 23:48:55
(1 hour ago)
Multiple WAF Violations
Web App Attack
๐ง๐ฌ
HighWay
2026-10-20 22:55:21
(2 hours ago)
34.32.75.177 - - [20/Oct/2026:22:54:54 +0000] "POST / HTTP/1.1" 404 891 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.32.75.177 - - [20/Oct/2026:22:54:54 +0000] "POST / HTTP/1.1" 404 891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:22:55:12 +0000] "GET /phpinfo.php HTTP/1.1" 404 7322 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:22:55:12 +0000] "GET /info.php HTTP/1.1" 404 891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:22:55:12 +0000] "GET /php.php HTTP/1.1" 404 891 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:22:55:13 +0000] "GET /i.php HTTP/1.1" 404 869 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:22:55:13 +0000] "GET /pi.php HTTP/1.1" 404
...
show less
Bad Web Bot
Web App Attack
๐จ๐ญ
leo1305
2026-10-20 22:46:05
(2 hours ago)
CrowdSec detection | scenario: http-probing
Port Scan
Web App Attack
Anonymous
2026-10-20 22:26:31
(3 hours ago)
apache-auth
Brute-Force
Web App Attack
๐ฉ๐ช
NihiliousMonk
2026-10-20 22:11:17
(3 hours ago)
Fail2Ban report from jail npm-scanners
Bad Web Bot
Web App Attack
๐ฉ๐ช
Gwyneth Llewelyn
2026-10-20 20:35:21
(4 hours ago)
2026/10/20 21:35:16 [error] 2414#2414: *455102 access forbidden by rule, client: 34.32.75.177, serve ...
show more
2026/10/20 21:35:16 [error] 2414#2414: *455102 access forbidden by rule, client: 34.32.75.177, server: opensim.betatechnologies.info, request: "GET /.env HTTP/1.1", host: "opensim.betatechnologies.info"
34.32.75.177 - - [20/Oct/2026:21:35:16 +0100] "GET /.env HTTP/1.1" 403 1178 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/10/20 21:35:19 [error] 2414#2414: *455102 access forbidden by rule, client: 34.32.75.177, server: opensim.betatechnologies.info, request: "GET /app/.env HTTP/1.1", host: "opensim.betatechnologies.info"
show less
Brute-Force
Web App Attack
๐ซ๐ท
Allolatr
2026-10-20 18:21:30
(7 hours ago)
Oct 20 20:21:28 [redacted] j443: ::ffff:34.32.75.177 openpgpkey.[redacted].com "GET /.git/config HTT ...
show more
Oct 20 20:21:28 [redacted] j443: ::ffff:34.32.75.177 openpgpkey.[redacted].com "GET /.git/config HTTP/1.1" 400 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" Oct 20 20:21:30 [redacted] j443: ::ffff:34.32.75.177 openpgpkey.[redacted].com "GET /.env HTTP/1.1" 400 556 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 08:36:02
(16 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.75.177 (177.75.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.75.177 (177.75.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 04:35:55.472598 2026] [security2:error] [pid 28845:tid 28845] [client 34.32.75.177:43060] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "openid.rimbey.us"] [uri "/.git/config"] [unique_id "atcn66e0rPkMBxuF93JkXQAAABw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 08:31:56
(16 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฆ๐บ
aranguren.org
2026-10-20 08:30:39
(16 hours ago)
34.32.75.177 - - [20/Oct/2026:19:30:35 +1100] "GET /.git/config HTTP/1.1" 404 992 "-" "Mozilla/5.0 ( ...
show more
34.32.75.177 - - [20/Oct/2026:19:30:35 +1100] "GET /.git/config HTTP/1.1" 404 992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:19:30:38 +1100] "GET /.env HTTP/1.1" 404 992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.32.75.177 - - [20/Oct/2026:19:30:38 +1100] "GET /.env.local HTTP/1.1" 404 992 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-20 07:43:00
(17 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.32.75.177 (177.75.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.75.177 (177.75.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 03:42:54.371413 2026] [security2:error] [pid 1575:tid 1575] [client 34.32.75.177:44582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "openheartwellness.com"] [uri "/.git/config"] [unique_id "atcbfrXcLlAcFSYvW5t_7QAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Mangelot Hosting
2026-10-19 23:12:51
(1 day ago)
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 34.32.75.177 (DE/Germany/177.75. ...
show more
(web_sensitive_file) srv104 Sensitive file probe (.env/.git/backup) 34.32.75.177 (DE/Germany/177.75.32.34.bc.googleusercontent.com): 2 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
๐บ๐ธ
MatCat
2026-10-19 02:05:10
(1 day ago)
Banned by fail2ban: apache-webprobe
Port Scan
Bad Web Bot