🇺🇸
TPI-Abuse
2026-09-17 07:47:15
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 17 03:47:06.777057 2026] [security2:error] [pid 3301:tid 3301] [client 34.47.16.75:59300] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "qbasys.com"] [uri "/.git/config"] [unique_id "aqua-oWv-6EP-eHr45-DZgAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
dynamix
2026-09-16 16:40:26
(1 day ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 16:33:13
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:33:07.924429 2026] [security2:error] [pid 926:tid 926] [client 34.47.16.75:42072] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pointandshootfilm.com"] [uri "/.git/config"] [unique_id "aqrEw5Auuft7enSNmoq-hgAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-16 16:15:50
(1 day ago)
Excessive 404/403 errors
Brute-Force
🇸🇪
vaia.cloud
2026-09-16 15:40:01
(1 day ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇩🇪
kkw
2026-09-16 15:29:42
(1 day ago)
[REDACTED] 34.47.16.75 - - [16/Sep/2026:17:29:41 +0200] "GET /.git/config HTTP/1.1" 404 553 "-" "Moz ...
show more
[REDACTED] 34.47.16.75 - - [16/Sep/2026:17:29:41 +0200] "GET /.git/config HTTP/1.1" 404 553 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
... (mode: searching http-sensitive-files)
show less
Bad Web Bot
Web App Attack
🇳🇱
middelkoopcc
2026-09-16 14:48:02
(1 day ago)
2026-09-16 16:46:38 GET /.git/config [301] && 2026-09-16 16:46:38 GET /.env [301] && 2026-09-16 16:4 ...
show more
2026-09-16 16:46:38 GET /.git/config [301] && 2026-09-16 16:46:38 GET /.env [301] && 2026-09-16 16:46:39 GET /.env.bak [301] && 168 more within 20 minutes
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 13:32:36
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 09:32:31.142262 2026] [security2:error] [pid 17447:tid 17447] [client 34.47.16.75:39064] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pocosfarm.com"] [uri "/.git/config"] [unique_id "aqqab8em-cuZaS-xtzc9bgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 00:35:57
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 20:35:51.942281 2026] [security2:error] [pid 23806:tid 23806] [client 34.47.16.75:56954] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "projectthinkspot.com"] [uri "/.git/config"] [unique_id "aqnkZ3Xjyka41iAFWNGDlwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
✨
2026-09-16 00:26:21
(1 day ago)
Domain : projectsresearch.co.uk
Rule : env
2026-09-16 00:25:08 ***hidden-privacy*** GET /.env.local ...
show more
Domain : projectsresearch.co.uk
Rule : env
2026-09-16 00:25:08 ***hidden-privacy*** GET /.env.local - 443 - 34.47.16.75 HTTP/1.1 Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36 - projectsresearch.co.uk 404 0 0 32570 289 1271 - -
show less
Hacking
SQL Injection
🇳🇱
Mangelot Hosting
2026-09-16 00:05:53
(1 day ago)
(modsecurity) srv102 ModSecurity 34.47.16.75 (CA/Canada/75.16.47.34.bc.googleusercontent.com): 30 in ...
show more
(modsecurity) srv102 ModSecurity 34.47.16.75 (CA/Canada/75.16.47.34.bc.googleusercontent.com): 30 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs:
show less
Web App Attack
🇬🇧
oja
2026-09-15 23:28:41
(1 day ago)
Aggressive web scanner
Web App Attack
🇩🇪
Gwyneth Llewelyn
2026-09-15 22:40:54
(1 day ago)
2026/09/15 23:40:46 [error] 2229833#2229833: *1173079 access forbidden by rule, client: 34.47.16.75, ...
show more
2026/09/15 23:40:46 [error] 2229833#2229833: *1173079 access forbidden by rule, client: 34.47.16.75, server: projects.betatechnologies.info, request: "GET /.env HTTP/2.0", host: "projects.betatechnologies.info"
34.47.16.75 - - [15/Sep/2026:23:40:46 +0100] "GET /.env HTTP/2.0" 403 1045 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
2026/09/15 23:40:52 [error] 2229833#2229833: *1173079 access forbidden by rule, client: 34.47.16.75, server: projects.betatechnologies.info, request: "GET /app/.env HTTP/2.0", host: "projects.betatechnologies.info"
show less
Brute-Force
Web App Attack
🇺🇸
alecj.com
2026-09-15 22:33:59
(1 day ago)
This IP was detected by CrowdSec triggering crowdsecurity/appsec-vpatch
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 21:34:06
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.47.16.75 (75.16.47.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 17:34:02.793142 2026] [security2:error] [pid 1701:tid 1866] [client 34.47.16.75:38946] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "projectmanagementcertification.org"] [uri "/.git/config"] [unique_id "aqm5ynPfzSI4aJu95-zGtQAAAlE"]
show less
Brute-Force
Bad Web Bot
Web App Attack