🇺🇸
chronos
2026-09-29 18:11:03
(1 month ago)
[AUTORAVALT][[29/09/2026 - 15:11:03 -03:00 UTC]
Attack from [Google LLC]
[34.156.255.75][75.255.156.34.bc.googleusercontent.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or ema ...
show more
[AUTORAVALT][[29/09/2026 - 15:11:03 -03:00 UTC]
Attack from [Google LLC]
[34.156.255.75][75.255.156.34.bc.googleusercontent.com]
Action: BLocKed
DDoS Attack -> Participating in distributed denial-of-service.
Phishing -> Phishing websites and/or email.
Web Spam -> Comment/forum spam, HTTP referer spam, or other CMS spam.
Blog Spam -> CMS blog comment spam.
Web]
...
show less
DDoS Attack
Phishing
Web Spam
Blog Spam
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 15:47:19
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:47:15.154852 2026] [security2:error] [pid 13369:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 11:47:15.154852 2026] [security2:error] [pid 13369:tid 13369] [client 34.156.255.75:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.rodrigoaldecoa.com"] [uri "/.git/config"] [unique_id "arvdg1-CiitHIrc_r5u9yQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-09-29 10:08:53
(1 month ago)
34.156.255.75 - - [29/Sep/2026:13:08:53 +0300] "GET /.git/config HTTP/1.1" 401 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.156.255.75 - - [29/Sep/2026:13:08:53 +0300] "GET /.env.lo ...
show more
34.156.255.75 - - [29/Sep/2026:13:08:53 +0300] "GET /.git/config HTTP/1.1" 401 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.156.255.75 - - [29/Sep/2026:13:08:53 +0300] "GET /.env.local HTTP/1.1" 401 36 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-29 04:32:52
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 00:32:49.473041 2026] [security2:error] [pid 14096:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 00:32:49.473041 2026] [security2:error] [pid 14096:tid 14100] [client 34.156.255.75:57886] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.ramona.town"] [uri "/.git/config"] [unique_id "ars_cSwU26GuGYoMXCE0AwAAAII"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-27 14:58:18
(1 month ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-24 17:36:16
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:36:11.967270 2026] [security2:error] [pid 6317:tid 6 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 13:36:11.967270 2026] [security2:error] [pid 6317:tid 6317] [client 34.156.255.75:50220] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dukecityinvestigations.kountz.org"] [uri "/.git/config"] [unique_id "arVfi65gRPVutb8JXHLYKQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
cg-design.co.uk
2026-09-23 10:33:30
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.156.255.75 (BE/Belgium/75.255.156.34.bc.googleusercontent.com)
SQL Injection
🇦🇺
2000cn.com.au
2026-09-23 10:13:05
(1 month ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-22 02:07:29
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:07:26.799831 2026] [security2:error] [pid 30633:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 22:07:26.799831 2026] [security2:error] [pid 30633:tid 30762] [client 34.156.255.75:46324] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.transiit.org"] [uri "/.git/config"] [unique_id "arHi3sbHdU-pqdnv8ZJWRwAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-22 01:27:04
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:27:00.903496 2026] [security2:error] [pid 13079:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.156.255.75 (75.255.156.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 21 21:27:00.903496 2026] [security2:error] [pid 13079:tid 13079] [client 34.156.255.75:34104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "crystalvisionsart.com"] [uri "/.git/config"] [unique_id "arHZZM5fm3lWDCAee_UDmgAAADs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-09-21 23:53:49
(1 month ago)
[TueSep2201:53:44.2472342026][security2:error][pid4157405:tid4157546][client34.156.255.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htacc ...
show more
[TueSep2201:53:44.2472342026][security2:error][pid4157405:tid4157546][client34.156.255.75:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"cpcontacts.tpgs.ch\"][uri\"/.env.bak\"][unique_id\"arHDiJuFjqGARM8muKPHbAAAAQ0\"]
show less
Port Scan
Brute-Force
Web App Attack
🇮🇹
VHosting
2026-09-21 14:10:03
(1 month ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇯🇵
ki3
2026-09-21 07:58:39
(1 month ago)
Fail2Ban: Web App Attacks and Forum Spam 34.156.255.75 1789977518.0(JST)
Web Spam
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-09-21 01:06:44
(1 month ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+12 more) | 2026-09-21 01:06 UTC
Hacking
Web App Attack
