🇺🇸
TPI-Abuse
2026-09-07 21:59:31
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.176.74.132 (132.74.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.74.132 (132.74.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 17:59:23.255600 2026] [security2:error] [pid 15800:tid 15800] [client 34.176.74.132:47768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mlappa.net"] [uri "/.git/config"] [unique_id "ap8zu6F2Hxs4GHZPzkR8NQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 08:49:13
(2 days ago)
240 requests with url.path */proc/*
Brute-Force
Bad Web Bot
2026-09-07 07:07:04
(2 days ago)
Automated web scanner. Requested suspicious paths: /.git/config. UTC: 2026-09-07 06:55:13.
Web App Attack
2026-09-07 03:30:04
(2 days ago)
CrowdSec decision: crowdsecurity/http-path-traversal-probing (origin: crowdsec)
Port Scan
2026-09-07 02:57:48
(2 days ago)
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh ...
show more
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.176.74.132 - - [07/Sep/2026:04:57:47 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-07 02:48:18
(2 days ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
ruusvuu
2026-09-07 01:39:05
(2 days ago)
Automated abuse report: 25 attack/probe requests from Google LLC / CL.
Targeted paths: /gcp-credenti ...
show more
Automated abuse report: 25 attack/probe requests from Google LLC / CL.
Targeted paths: /gcp-credentials.json, /credentials.json, /google-credentials.json, /.config/gcloud/application_default_credentials.json, /application_default_credentials.json.
Sample log lines:
[mirassertions] 2026-09-06 18:39:04: 9/6/2026 18:39:04 34.176.74.132 GET /@fs/etc/passwd?raw 404 - 3.452 ms -
[mirassertions] 2026-09-06 18:39:04: 9/6/2026 18:39:04 34.176.74.132 GET /@fs/etc/passwd?import&raw 404 - 1.044 ms -
[mirassertions] 2026-09-06 18:39:04: 9/6/2026 18:39:04 34.176.74.132 GET /js/header.js.map 404 - 1.205 ms -
Detected by an automated web-server log monitor.
show less
Web App Attack
2026-09-07 01:38:27
(2 days ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-09-07 01:35:12
(2 days ago)
Web App Attack
🇳🇱
Savvii
2026-09-07 00:52:00
(2 days ago)
20 attempts against mh-misbehave-ban on ec102945
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
EGP Abuse Dept
2026-09-07 00:50:28
(2 days ago)
Scanning for web/db/file exploits on meubelcity.tafelconfigurator.nl
SQL Injection
Bad Web Bot
Web App Attack
🇫🇷
Octopuce
2026-09-06 23:15:16
(2 days ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 05:09:54
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.176.74.132 (132.74.176.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.176.74.132 (132.74.176.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 06 01:09:47.258567 2026] [security2:error] [pid 16626:tid 16677] [client 34.176.74.132:60156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "markhoran.pictures"] [uri "/.git/config"] [unique_id "apz1m7JA6db0_H1oeKY1UwAAARM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-09-06 03:22:38
(3 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇩🇪
LRob
2026-09-06 00:04:03
(3 days ago)
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: ...
show more
Probing for secret files (.git, .env, credentials, database dumps, wp-config) | method: GET | path: /.git/config (+1 more) | 2026-09-06 00:04 UTC
show less
Hacking
Web App Attack
