🇬🇧
[email protected]
2025-10-30 00:51:01
UTC ·
(1 year ago)
...
Brute-Force
SSH
🇳🇱
homeshowdomain.nl
2025-10-29 22:59:21
UTC ·
(1 year ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2025-10-28.
Hacking
Web App Attack
SSH
🇫🇷
JPPO
2025-10-29 11:12:02
UTC ·
(1 year ago)
2 hits : Port 80/443 : GET /.git or /.git/HEAD, /.git/config ... /.DS_store
Web App Attack
🇳🇱
JCB
2025-10-29 08:55:00
UTC ·
(1 year ago)
37.27.18.173 - - [29/Oct/2025:00:46:38 +0200] "GET /.git/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
37.27.18.173 - - [29/Oct/2025:01:17:09 +0200] "GE ...
show more
37.27.18.173 - - [29/Oct/2025:00:46:38 +0200] "GET /.git/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.2 Safari/605.1.15"
37.27.18.173 - - [29/Oct/2025:01:17:09 +0200] "GET /.git/ HTTP/1.1" 404 196 "-" "Mozilla/5.0 (Ubuntu; Linux i686; rv:128.0) Gecko/20100101 Firefox/128.0"
...
show less
Hacking
Brute-Force
Web App Attack
🇮🇹
LTM
2025-10-29 07:20:01
UTC ·
(1 year ago)
WebServer - Attempts to exploit
Hacking
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2025-10-29 00:23:47
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 20:23:41.032179 2025] [security2:error] [pid 24342:t ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 20:23:41.032179 2025] [security2:error] [pid 24342:tid 24342] [client 37.27.18.173:49860] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aquascapes.net"] [uri "/.git/"] [unique_id "aQFejfvXfPamce59n9NFywAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 23:50:54
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:50:50.497707 2025] [security2:error] [pid 16740:t ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 19:50:50.497707 2025] [security2:error] [pid 16740:tid 16740] [client 37.27.18.173:41862] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brandoncomputergeeks.com"] [uri "/.git/"] [unique_id "aQFW2p9WG_JT4IeNvkKbRQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2025-10-28 22:05:05
UTC ·
(1 year ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
Anonymous
2025-10-28 21:07:29
UTC ·
(1 year ago)
HTTPS vulnerability scan attempt detected. Port 443.
Hacking
SQL Injection
Web App Attack
🇫🇮
YF
2025-10-28 21:00:50
UTC ·
(1 year ago)
404 errors (Vulnerability scan)
Brute-Force
Web App Attack
🇫🇮
stinpriza
2025-10-28 20:57:24
UTC ·
(1 year ago)
Web App Attack
Web App Attack
🇺🇸
etu brutus
2025-10-28 20:31:09
UTC ·
(1 year ago)
37.27.18.173 has been banned for [WebApp Attack]
...
Hacking
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 20:20:40
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 16:20:33.378921 2025] [security2:error] [pid 1411:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 16:20:33.378921 2025] [security2:error] [pid 1411:tid 1411] [client 37.27.18.173:44610] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "fluff3.instagenii.com"] [uri "/.git/"] [unique_id "aQElkTeRph09UTiSWeCFyAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2025-10-28 19:07:43
UTC ·
(1 year ago)
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:07:36.167651 2025] [security2:error] [pid 16052:t ...
show more
(mod_security) mod_security (id:210492) triggered by 37.27.18.173 (static.173.18.27.37.clients.your-server.de): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 28 15:07:36.167651 2025] [security2:error] [pid 16052:tid 16091] [client 37.27.18.173:55892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mcismanila.com"] [uri "/.git/"] [unique_id "aQEUeIiJq59h5CJqpYoBxAAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇩
Burayot
2025-10-28 18:52:16
UTC ·
(1 year ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 37.27.18.173 (FI/Finland/static.173.18.27.37.clients.your-server.de): 1 in the last 3600 secs
Web App Attack