|
๐ฒ๐ฝ
octageeks.com
|
|
Wordpress malicious attack:[octablocked]
|
Web App Attack
|
|
Anonymous
|
|
[ssd5.kdns.gr] httpd-config-scan: sites=www.dentallaboratory.gr; logs=/var/log/httpd/domains/dentallaboratory.gr.log; samples=/%2eenv | /api/.env/public/.env | //.env
|
Hacking
Web App Attack
|
|
๐จ๐ฆ
Anytech
|
|
Blocked by ConnMonitor
|
Web App Attack
|
|
Anonymous
|
|
2026/09/22 17:32:24 [error] 2433724#2433724: *119365 access forbidden by rule, client: 34.148.150.137, server: freeflight.org.za, request: "GET /.vite/manifest.json HTTP/2.0", host: "freeflight.org.za"
2026/09/22 17:32:24 [error] 2433724#2433724: *11 ...
show more
2026/09/22 17:32:24 [error] 2433724#2433724: *119365 access forbidden by rule, client: 34.148.150.137, server: freeflight.org.za, request: "GET /.vite/manifest.json HTTP/2.0", host: "freeflight.org.za"
2026/09/22 17:32:24 [error] 2433724#2433724: *119365 access forbidden by rule, client: 34.148.150.137, server: freeflight.org.za, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "freeflight.org.za"
2026/09/22 17:32:29 [error] 2433724#2433724: *119365 access forbidden by rule, client: 34.148.150.137, server: freeflight.org.za, request: "GET /api/.env HTTP/2.0", host: "freeflight.org.za"
...
show less
|
Hacking
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:03:13.437393 2026] [security2:error] [pid 21501:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 11:03:13.437393 2026] [security2:error] [pid 21501:tid 21501] [client 34.148.150.137:36058] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hierrosbernal.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hierrosbernal.com"] [uri "/z9x8c7v6b5-debug-trigger-hierrosbernal.com"] [unique_id "arKYsT2jbT236MUA6Is2fwAAABo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
Anonymous
|
|
IP matched detection query bad paths many.
|
Brute-Force
Web App Attack
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:04:15.979540 2026] [security2:error] [pid 19153:ti ...
show more
(mod_security) mod_security (id:210730) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 10:04:15.979540 2026] [security2:error] [pid 19153:tid 19153] [client 34.148.150.137:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||luisguacache.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "luisguacache.com"] [uri "/z9x8c7v6b5-debug-trigger-luisguacache.com"] [unique_id "arKK3-nNXEzmhMFDFh9-RAAAACQ"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐บ๐ธ
thezelijah
|
|
Instant triage triggered (malicious-request | suspicious-query | query-attack | high | query-traversal). AbuseIPDB 68 (12 reports) | VirusTotal: 0/89 engines flagged (none)
|
Bad Web Bot
Web App Attack
|
|
๐ซ๐ท
LoneRider
|
|
[22/Sep/2026:15:56:29.030817 +0200] arKJDeZUfkfIx709xpzQIAAAAAE 34.148.150.137 56922 127.0.0.1 7081
[22/Sep/2026:15:56:29.672839 +0200] arKJDeZUfkfIx709xpzQIwAAAAE 34.148.150.137 57170 127.0.0.1 7081
[22/Sep/2026:15:56:30.791140 +0200] arKJDp4EYIU4mm ...
show more
[22/Sep/2026:15:56:29.030817 +0200] arKJDeZUfkfIx709xpzQIAAAAAE 34.148.150.137 56922 127.0.0.1 7081
[22/Sep/2026:15:56:29.672839 +0200] arKJDeZUfkfIx709xpzQIwAAAAE 34.148.150.137 57170 127.0.0.1 7081
[22/Sep/2026:15:56:30.791140 +0200] arKJDp4EYIU4mmaCJ1OL3wAAAAI 34.148.150.137 52392 127.0.0.1 7081
...
show less
|
Hacking
|
|
๐บ๐ธ
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:46:11.254098 2026] [security2:error] [pid 29444:ti ...
show more
(mod_security) mod_security (id:210492) triggered by 34.148.150.137 (137.150.148.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 22 09:46:11.254098 2026] [security2:error] [pid 29444:tid 29444] [client 34.148.150.137:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mindmaterial.io"] [uri "/.env.example"] [unique_id "arKGo9SWK0abN_n26M60DAAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
๐ต๐ฑ
Niko's Stuff
|
|
Triggered crowdsecurity/http-probing. More information at: https://app.crowdsec.net/cti/34.148.150.137
|
Web App Attack
Hacking
|
|
๐ฉ๐ช
YF
|
|
404 errors Vulnerability scan
|
Web App Attack
|
|
๐ฉ๐ช
33three
|
|
Fail2Ban jail WebAttack triggered
|
Brute-Force
|
|
๐ณ๐ฑ
Site.eu
|
|
Excessive 404/403 errors
|
Brute-Force
|