🇳🇱
WeCloudit-Anti-Abuse
2026-09-16 04:18:28
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-15 22:53:50
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.17.84 (84.17.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.17.84 (84.17.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 18:53:43.495548 2026] [security2:error] [pid 28989:tid 28989] [client 34.154.17.84:52658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.pallettrucksni.com"] [uri "/.git/config"] [unique_id "aqnMdyjfjyIPuqQtA9y-8gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-15 20:33:35
(1 week ago)
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Examp ...
show more
[mx02al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.17.84 - - [15/Sep/2026:22:33:34 +0200] "GET /.git/config HTTP/1.1" 404 1434 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 19:27:06
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.154.17.84 (84.17.154.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.17.84 (84.17.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 15:27:02.037681 2026] [security2:error] [pid 22578:tid 22578] [client 34.154.17.84:58340] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.oualie.com"] [uri "/.git/config"] [unique_id "aqmcBpIeN3Ndx1-A8HNrJAAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
e.fierstra
2026-09-15 10:01:42
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-09-15 05:41:12
(1 week ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.154.17.84 - - [15/Sep/2026:07:41:11 +0200] "GET /.git/config HTTP/1.1" 404 2129 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
2026-09-15 05:01:04
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Mangelot Hosting
2026-09-15 03:52:50
(1 week ago)
(php_susp_dir) srv104 PHP Suspicious Directory 34.154.17.84 (IT/Italy/84.17.154.34.bc.googleusercont ...
show more
(php_susp_dir) srv104 PHP Suspicious Directory 34.154.17.84 (IT/Italy/84.17.154.34.bc.googleusercontent.com): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇳🇱
Site.eu
2026-09-15 03:20:01
(1 week ago)
Excessive 404/403 errors
Brute-Force
🇩🇪
LRob
2026-09-15 03:05:10
(1 week ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config | 2026-09-15 03:05 UTC
show less
Hacking
Web App Attack