๐บ๐ธ
TPI-Abuse
2026-10-20 21:26:41
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 17:26:36.204515 2026] [security2:error] [pid 4319:tid 4355] [client 34.21.170.10:39758] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentz.me.aafm.us"] [uri "/.git/config"] [unique_id "atfcjLH-EljpEl911QCkJAAAAI0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-20 21:14:48
(4 hours ago)
Web attack/malicious scanning detected
Web App Attack
๐ฌ๐ง
poundawebsiteltd
2026-10-20 20:59:07
(4 hours ago)
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.21.170. ...
show more
Malicious activity in general-malicious. Evidence: (apache_probe) Failed Access (403/404) 34.21.170.10 (SG/Singapore/[REDACTED_DOMAIN]): 20 in the last 3600 secs | UA: (apache_probe) Failed Access (403/404) 34.21.170.10 (SG/Singapore/10.170.21.34.bc.googleusercontent.com): 20 in the last 3600 secs
show less
Brute-Force
Web App Attack
๐ซ๐ฎ
NoaQT
2026-10-20 19:27:17
(6 hours ago)
2026-10-20T19:27:15.870093+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:15.86 ...
show more
2026-10-20T19:27:15.870093+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:15.869] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/113/0/0/0 0/0 "GET /.env.prod HTTP/1.1"
2026-10-20T19:27:16.087242+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:16.086] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/113/0/0/0 0/0 "GET /.env.stage HTTP/1.1"
2026-10-20T19:27:16.309557+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:16.309] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/113/0/0/0 0/0 "GET /.env.ci HTTP/1.1"
2026-10-20T19:27:16.508666+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:16.508] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/113/0/0/0 0/0 "GET /.env.docker HTTP/1.1"
2026-10-20T19:27:16.769776+00:00 ingress-1 haproxy[275]: 34.21.170.10:46922 [20/Oct/2026:19:27:16.769] https_in~ https_in/<NOSRV> 0/-1/-1/-1/0 429 225 - - PR-- 113/113/0/0/0 0/0 "GET
...
show less
DDoS Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 18:19:58
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 14:19:52.962926 2026] [security2:error] [pid 6603:tid 6603] [client 34.21.170.10:59534] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mentalmolecule.com"] [uri "/.git/config"] [unique_id "atewyOGSC-Pj6NtFNBAxgQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-20 17:49:38
(7 hours ago)
34.21.170.10 - - [20/Oct/2026:19:49:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; ...
show more
34.21.170.10 - - [20/Oct/2026:19:49:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.170.10 - - [20/Oct/2026:19:49:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.170.10 - - [20/Oct/2026:19:49:32 +0200] "POST / HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.170.10 - - [20/Oct/2026:19:49:33 +0200] "GET /.git/config HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.170.10 - - [20/Oct/2026:19:49:33 +0200] "GET /.env HTTP/1.1" 403 183 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.21.1
...
show less
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-20 17:47:45
(7 hours ago)
190 requests with url.path *.php.bak
Brute-Force
Bad Web Bot
๐ซ๐ฎ
paissangroup
2026-10-20 17:33:06
(7 hours ago)
Multiple WAF Violations
Web App Attack
Anonymous
2026-10-20 17:30:05
(7 hours ago)
CrowdSec decision: crowdsecurity/http-probing (origin: crowdsec)
Web App Attack
๐ซ๐ท
dynamix
2026-10-20 16:03:05
(9 hours ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-20 15:55:27
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.170.10 (10.170.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 20 11:55:20.109190 2026] [security2:error] [pid 29758:tid 29771] [client 34.21.170.10:55038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mensaxes.net"] [uri "/.git/config"] [unique_id "ateO6FGCxjkLcTFWYZBQWAAAAMs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-20 14:22:28
(11 hours ago)
Excessive multi-domain requests
Brute-Force
Anonymous
2026-10-20 14:00:06
(11 hours ago)
Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, GET /.env.test HTTP/1.1, GET /.en ...
show more
Bot / scanning and/or hacking attempts: GET /.env.remote HTTP/1.1, GET /.env.test HTTP/1.1, GET /.env.backup HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.bak HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env HTTP/1.1, GET /.env.local HTTP/1.1, GET /.env.production HTTP/1.1
show less
Hacking
Web App Attack
๐ซ๐ท
Octopuce
2026-10-20 12:23:20
(13 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /web/.env ...
Web App Attack
๐ฉ๐ช
big-cloud.nl
2026-10-20 12:11:33
(13 hours ago)
Try to access /.git/config
Web App Attack