๐ฉ๐ช
curiosity
2026-09-30 04:31:33
(1 week ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-admin-interface-probing
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-09-29 06:04:26
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:04:23.608047 2026] [security2:error] [pid 1059:tid 1059] [client 34.21.142.185:42666] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "amarrasdeescobar.com.cerrovictoria.com"] [uri "/.git/config"] [unique_id "artU5_Nk-3S7F5xQw2dHAgAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 13:15:59
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 09:15:54.230005 2026] [security2:error] [pid 3122:tid 3202] [client 34.21.142.185:60822] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "electriccommunicationsmarketing.org.bestofthis.com"] [uri "/.git/config"] [unique_id "arpois-WJzuXwislx5U66wAAAQs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-27 14:12:51
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 27 10:12:43.865413 2026] [security2:error] [pid 24417:tid 24417] [client 34.21.142.185:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "atlascoombs.com"] [uri "/.git/config"] [unique_id "arkkW3llZDLYb9lhHtHTtgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-27 08:20:03
(2 weeks ago)
Aggressive web scan
Web App Attack
Anonymous
2026-09-26 21:10:01
(2 weeks ago)
[web.zebs.ch] httpd-config-scan: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; ...
show more
[web.zebs.ch] httpd-config-scan: sites=www.asiqual.com; logs=/var/log/httpd/domains/asiqual.com.log; samples=/.git/config | /.env | /.env.local
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 19:14:37
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.142.185 (185.142.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 15:14:30.968812 2026] [security2:error] [pid 3529:tid 3529] [client 34.21.142.185:45998] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "candlesandwoodcrafts.com"] [uri "/.git/config"] [unique_id "argZlqKQX-GqdPTBEmMLHQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-25 19:06:49
(2 weeks ago)
Web application attack detected.
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-25 03:39:03
(2 weeks ago)
Excessive 404/403 errors
Brute-Force
Anonymous
2026-09-25 03:10:06
(2 weeks ago)
| [Dangerous/Singapore] Aggressive IP 34.21.142.185 (~30 hits). Type: DoS Defender- Web server 400 e ...
show more
| [Dangerous/Singapore] Aggressive IP 34.21.142.185 (~30 hits). Type: DoS Defender- Web server 400 error code
show less
Web App Attack
Hacking
SQL Injection
๐ช๐ธ
robotstxt
2026-09-24 18:04:20
(2 weeks ago)
34.21.142.185 - - [24/Sep/2026:18:03:19 +0000] "POST / HTTP/1.1" 403 11526 "-" "Mozilla/5.0 (Macinto ...
show more
34.21.142.185 - - [24/Sep/2026:18:03:19 +0000] "POST / HTTP/1.1" 403 11526 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.21.142.185"
34.21.142.185 - - [24/Sep/2026:18:03:20 +0000] "POST / HTTP/1.1" 403 11526 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.21.142.185"
34.21.142.185 - - [24/Sep/2026:18:03:20 +0000] "GET /.git/config HTTP/1.1" 403 10904 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.21.142.185"
34.21.142.185 - - [24/Sep/2026:18:03:21 +0000] "GET /.env HTTP/1.1" 403 10904 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.21.142.185"
34.21.142.185 - - [24/Sep/2026:18:03:22 +0000] "GET /.env.local HTTP/1.1" 403 10904 "-" "Mo
...
show less
Web App Attack
๐ซ๐ท
dynamix
2026-09-23 21:33:44
(2 weeks ago)
Multiple WAF Violations
Web App Attack
๐ฆ๐บ
rubixstudios
2026-09-21 10:33:02
(3 weeks ago)
Excessive HTTP requests consistent with automated attack behaviour detected by Imunify360
DDoS Attack
Brute-Force
Web App Attack
๐ฎ๐น
VHosting
2026-09-20 13:35:04
(3 weeks ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack