🇿🇦
conure.sh
2026-08-28 12:14:43
UTC ·
(2 months ago)
csagent: score 20.5: secrets grab x2, 404 noise floor x2; 1 domain(s) in 0s
Web App Attack
🇩🇪
gadix
2026-08-28 00:00:49
UTC ·
(2 months ago)
[28/Aug/2026:02:00:46.256041 +0200] apDPrm2HhpDDeUkZkkE-PwAAAAs 34.150.1.17 37896 127.0.0.1 7081
[28/Aug/2026:02:00:46.257898 +0200] apDPrhqciPQdScUR3nwlFgAAAEo 34.150.1.17 37902 127.0.0.1 7081
[28/Aug/2026:02:00:46.261091 +0200] apDPrm2HhpDDeUkZkkE- ...
show more
[28/Aug/2026:02:00:46.256041 +0200] apDPrm2HhpDDeUkZkkE-PwAAAAs 34.150.1.17 37896 127.0.0.1 7081
[28/Aug/2026:02:00:46.257898 +0200] apDPrhqciPQdScUR3nwlFgAAAEo 34.150.1.17 37902 127.0.0.1 7081
[28/Aug/2026:02:00:46.261091 +0200] apDPrm2HhpDDeUkZkkE-QAAAABE 34.150.1.17 37910 127.0.0.1 7081
...
show less
Web App Attack
🇬🇧
Artelis
2026-08-27 23:13:24
UTC ·
(2 months ago)
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /html/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23 ...
show more
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /html/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /backend/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /app/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /www/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /src/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /public/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /api/.git/config HTTP/1.1" 404 146 "-" "crusader-worker/1.0"
34.150.1.17 - - [27/Aug/2026:23:13:23 +0000] "GET /htdocs/.git/config HTTP/1.1" 404 146 "-" "crusader-worker
...
show less
Web App Attack
Anonymous
2026-08-27 22:05:13
UTC ·
(2 months ago)
WAF repeated trigger detected by Fail2Ban
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 16:23:21
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.150.1.17 (17.1.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:23:14.540522 2026] [security2:error] [pid 748:tid 748] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.1.17 (17.1.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 12:23:14.540522 2026] [security2:error] [pid 748:tid 748] [client 34.150.1.17:55944] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.nfc.magodarman.com"] [uri "/htdocs/.git/config"] [unique_id "apBkcpA9M5XJK_E70x3tAwAAACk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-08-27 15:03:54
UTC ·
(2 months ago)
🔥 Web application attack detected. Vulnerability scanning and exploitation attempts identified.
Web App Attack
Anonymous
2026-08-27 14:30:02
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
🇺🇸
TPI-Abuse
2026-08-27 13:02:38
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.150.1.17 (17.1.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:02:30.998141 2026] [security2:error] [pid 3064:tid 3064] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.150.1.17 (17.1.150.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Aug 27 09:02:30.998141 2026] [security2:error] [pid 3064:tid 3064] [client 34.150.1.17:34866] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "drpeppard.com"] [uri "/var/www/.git/config"] [unique_id "apA1Zk-AnjR7o1izoXdskQAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-08-27 12:49:54
UTC ·
(2 months ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-08-27 11:55:05
UTC ·
(2 months ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
🇫🇷
ELYAZ
2026-08-27 09:30:06
UTC ·
(2 months ago)
(y3) Failed access -byebye- from 34.150.1.17 (HK/Hong Kong/17.1.150.34.bc.googleusercontent.com): (CF_ENABLE)
Hacking
🇫🇷
dynamix
2026-08-27 08:14:01
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇩🇪
4server
2026-08-27 07:52:09
UTC ·
(2 months ago)
[ThuAug2709:52:06.8872502026][security2:error][pid871725:tid871838][client34.150.1.17:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCK ...
show more
[ThuAug2709:52:06.8872502026][security2:error][pid871725:tid871838][client34.150.1.17:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:5\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.10\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.craniosacraltherapy.ch.136-243-54-122.cpanel.site\"][uri\"/var/www/.git/config\"][unique_id\"ao_spvD0HscD8O5-t_LlcgAAANg\"]
show less
Port Scan
Brute-Force
Web App Attack
🇳🇱
WeCloudit-Anti-Abuse
2026-08-27 07:06:48
UTC ·
(2 months ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking
🇳🇿
Antinson
2026-08-27 06:39:31
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot