🇺🇸
TPI-Abuse
2026-10-22 16:12:15
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 12:12:10.001295 2026] [security2:error] [pid 31246:tid 31246] [client 34.17.112.147:36894] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.tmarketingproducts.com"] [uri "/.git/config"] [unique_id "ato12nlShe9Ic27tt2CJ3wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:59:17
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:59:13.820668 2026] [security2:error] [pid 6611:tid 6611] [client 34.17.112.147:53770] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.therealseska.com"] [uri "/.git/config"] [unique_id "atoWsSDJ1zgjGPdiy6-Z3AAAACA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 13:35:42
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 09:35:38.085083 2026] [security2:error] [pid 497:tid 497] [client 34.17.112.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.theneighborswindow.com"] [uri "/.git/config"] [unique_id "atoRKsnr6GTnq87KBEBuyQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 11:40:51
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 07:40:46.637844 2026] [security2:error] [pid 19088:tid 19088] [client 34.17.112.147:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.theabstractpress.com"] [uri "/.git/config"] [unique_id "atn2Pjyi7ZSPu3OJyhP0iAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-22 09:43:33
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.17.112.147 (147.112.17.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 22 05:43:28.780767 2026] [security2:error] [pid 28967:tid 28967] [client 34.17.112.147:54788] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcalendars.technologymoods.com"] [uri "/.git/config"] [unique_id "atnawMTGhvOt0qYYuvLdUwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇭🇺
miszterx.hu
2026-10-20 07:30:23
(2 days ago)
XORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_i ...
show more
XORP (haproxy): 270x HTTP 404/403/500 or handshake failure in 24h. Automated report from log_check_iptables_generator.sh (xorp.hu)
show less
Web App Attack
🇦🇺
Klaverstyn
2026-10-19 23:40:04
(2 days ago)
Repeated 403 Forbidden responses
Web App Attack
🇩🇪
Lennart Kramer
2026-10-19 22:59:27
(2 days ago)
Restricted File Access Attempt | Matched phrase "*env*" at /.env.production | Mozilla/5.0 (X11; Linu ...
show more
Restricted File Access Attempt | Matched phrase "*env*" at /.env.production | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
🇺🇸
[email protected]
2026-10-19 22:56:48
(2 days ago)
CrowdSec ban: crowdsecurity/appsec-vpatch on unknown-host (duration 4h)
Web App Attack
🇨🇦
Bots.go.to.hell
2026-10-19 08:12:53
(3 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
🇫🇷
Murazaki
2026-10-19 08:01:42
(3 days ago)
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:39 +0200] "GET /mailer/.env HTTP/1.1" 400 0 ...
show more
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:39 +0200] "GET /mailer/.env HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.51:9980"
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:39 +0200] "GET /mail/.env HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.51:9980"
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:40 +0200] "GET /mailing/.env HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.51:9980"
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:41 +0200] "GET /mailgun/.env HTTP/1.1" 400 0 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "172.22.0.51:9980"
collabora.balamb.fr 34.17.112.147 - - [19/Oct/2026:10:01:41 +0200] "GET /mailjet/.env HT
...
show less
Bad Web Bot
🇫🇷
spot
2026-10-19 07:52:41
(3 days ago)
34.17.112.147 - - [19/Oct/2026:08:52:40 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 ...
show more
34.17.112.147 - - [19/Oct/2026:08:52:40 +0100] "GET /.git/config HTTP/1.1" 404 543 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Web App Attack
Hacking
2026-10-19 01:53:16
(3 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
2026-10-19 01:07:00
(3 days ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Co ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/appsec-vpatch; Action=ban; Events=2; Country=IT; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
2026-10-19 00:01:59
(3 days ago)
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Event ...
show more
IncogNET WAF local CrowdSec decision. Scenario=crowdsecurity/http-sensitive-files; Action=ban; Events=5; Hosts=coincheckout.theispco.com; Paths=/.env,/.env.dev,/.env.prod,/.env.stage,/.git/config; Country=IT; ASN=396982 GOOGLE-CLOUD-PLATFORM
show less
Hacking
Web App Attack