๐ฉ๐ช
klaus_ph
2026-09-23 10:32:31
(1 day ago)
2026-09-22 23:14:20,273 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.75.107.189
.. ...
show more
2026-09-22 23:14:20,273 fail2ban.actions [535885]: NOTICE [ipblocklist] Ban 34.75.107.189
...
show less
Bad Web Bot
๐ฎ๐ณ
evicky2002
2026-09-22 06:00:01
(3 days ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
๐ฌ๐ง
openstrike.co.uk
2026-09-22 05:14:59
(3 days ago)
6 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐ฉ๐ช
Blexyel
2026-09-22 01:10:53
(3 days ago)
34.75.107.189 - - [22/Sep/2026:03:10:52 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc ...
show more
34.75.107.189 - - [22/Sep/2026:03:10:52 +0200] "GET /.git/config HTTP/1.1" 200 265 "-" "-" "pingusmc.org"
...
show less
Brute-Force
Web App Attack
๐ฌ๐ง
andypiper
2026-09-22 01:00:16
(3 days ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ช๐ธ
el-brujo
2026-09-22 00:48:27
(3 days ago)
Cloudflare WAF: Request Path: /.git/config Request Query: Host: whk.elhacker.net userAgent: Action ...
show more
Cloudflare WAF: Request Path: /.git/config Request Query: Host: whk.elhacker.net userAgent: Action: block Source: firewallCustom ASN Description: Google LLC Country: US Method: GET Timestamp: 2026-09-22T00:48:27Z ruleId: 6b2d48d0415e4adb9f099d85f54d1de6. Report generated by Cloudflare-WAF-to-AbuseIPDB.
show less
Hacking
SQL Injection
Web App Attack
๐ฎ๐น
CoreTech srl
2026-09-22 00:43:56
(3 days ago)
cloudlinux2 fail2ban: 2026-09-22 02:38:54,179 fail2ban.actions [1598]: NOTICE [plesk-modsecu ...
show more
cloudlinux2 fail2ban: 2026-09-22 02:38:54,179 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Unban 39.35.225.104cloudlinux2 fail2ban: 2026-09-22 02:38:57,777 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 206.232.1.243 - 2026-09-22 02:38:57cloudlinux2 fail2ban: 2026-09-22 02:39:28,656 fail2ban.filter [1598]: INFO [plesk-wordpress] Found 136.144.33.178 - 2026-09-22 02:39:28cloudlinux2 fail2ban: 2026-09-22 02:40:03,471 fail2ban.actions [1598]: NOTICE [plesk-modsecurity] Unban 34.44.31.201cloudlinux2 fail2ban: 2026-09-22 02:41:08,649 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.16.154.23 - 2026-09-22 02:41:08cloudlinux2 fail2ban: 2026-09-22 02:41:10,168 fail2ban.filter [1598]: INFO [recidive] Found 34.16.154.23 - 2026-09-22 02:41:10cloudlinux2 fail2ban: 2026-09-22 02:41:09,829 fail2ban.filter [1598]: INFO [plesk-modsecurity] Found 34.16.154.23 - 2026-09-22 02:41:09cloudlinux2 fail2ban: 2026-09-22 02:41:10,166 fail2ba
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 00:42:13
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:42:08.089951 2026] [security2:error] [pid 859:tid 859] [client 34.75.107.189:36736] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whitesquirrelholdings.hal.dance"] [uri "/.git/config"] [unique_id "arHO4I06SyPpNE2JJLsoeAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-22 00:16:39
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 20:16:33.076360 2026] [security2:error] [pid 3117:tid 3117] [client 34.75.107.189:57030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whiddenstudios.com"] [uri "/.git/config"] [unique_id "arHI4cCqudFRMldhlXUhHAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
interbiznw.com
2026-09-21 23:40:13
(3 days ago)
fail2ban-ban
Hacking
Brute-Force
Exploited Host
Web App Attack
๐ต๐ฑ
Budyn
2026-09-21 23:39:10
(3 days ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scan ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: Enterprise & Framework Recon Scanner. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: what.are.you.looking.for.budyn.xyz | URI: /.git/config | UA: Unknown User-Agent | BODY: [Empty / GET Request]
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:36:29
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:36:24.780873 2026] [security2:error] [pid 8594:tid 8594] [client 34.75.107.189:54106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "whaleyhouse.net"] [uri "/.git/config"] [unique_id "arG_eDmUW6K_Ejh7uqJ7tgAAAEw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-21 23:14:49
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.75.107.189 (189.107.75.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 19:14:44.316203 2026] [security2:error] [pid 13947:tid 13947] [client 34.75.107.189:59664] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wfowisdom.systemcapacityoptimization.com"] [uri "/.git/config"] [unique_id "arG6ZHyDf29ZiWG_w3hOQgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-21 22:55:01
(3 days ago)
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 40474 | TTL: 64 | LEN: 60 | TOS: 0x0 ...
show more
Blocked by firewall on hugin [443/tcp] | Rule: AbuseIPDB | SPT: 40474 | TTL: 64 | LEN: 60 | TOS: 0x00 โข Reported by: github.com/sefinek/UFW-AbuseIPDB-Reporter
show less
Port Scan
๐ซ๐ท
spot
2026-09-21 22:26:40
(3 days ago)
34.75.107.189 - - [21/Sep/2026:23:26:38 +0100] "GET /.git/config HTTP/1.1" 404 4664 "-" "-"
...
Web App Attack
Hacking