๐จ๐ญ
dalslab ltd
2026-09-29 21:34:50
(5 days ago)
[29/Sep/2026:23:34:41 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 34.101.172.16] [Lengt ...
show more
[29/Sep/2026:23:34:41 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 34.101.172.16] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[29/Sep/2026:23:34:41 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 34.101.172.16] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[29/Sep/2026:23:34:41 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 34.101.172.16] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-"
[29/Sep/2026:23:34:41 +0200] - 405 405 - POST https ys.dalslab.com "/" [Client 34.101.172.16] [Length 552] [Gzip -] [Sent-to 10.1.1.49] "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gec
...
show less
Web Spam
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 20:28:33
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 16:28:26.694634 2026] [security2:error] [pid 24693:tid 24693] [client 34.101.172.16:55710] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.callbobh.com"] [uri "/.git/config"] [unique_id "arwfarWc0L1c71qabKuRcwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
pipeline.es
2026-09-29 19:53:24
(5 days ago)
Web scanning / probing for vulnerable paths | URL: /.env.dev | Evidence: microsites.grupoeuropa.com ...
show more
Web scanning / probing for vulnerable paths | URL: /.env.dev | Evidence: microsites.grupoeuropa.com 34.101.172.16 - - [29/Sep/2026:21:51:37 +0200] \"GET /.env.dev HTTP/1.1\" 403 210 \"-\" \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36\" GEOIP_COUNTRY_CODE=ID | ASN: GOOGLE-CLOUD-PLATFORM | Country: ID
show less
Port Scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-29 06:08:40
(6 days ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 29 02:08:32.736536 2026] [security2:error] [pid 14753:tid 14753] [client 34.101.172.16:46872] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sfpantry.noshsf.com"] [uri "/.git/config"] [unique_id "artV4KBpRFez6ix9eq7w-gAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 10:20:17
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 06:20:14.330694 2026] [security2:error] [pid 19273:tid 19281] [client 34.101.172.16:49436] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.seasonsgreeter.lightsondisplay.com"] [uri "/.git/config"] [unique_id "aro_XkbCXKVHJoeAxFL1WAAAAEU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-28 08:49:35
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 28 04:49:29.792669 2026] [security2:error] [pid 32114:tid 32114] [client 34.101.172.16:55290] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "dudleyanddudley.com"] [uri "/.git/config"] [unique_id "aroqGUPqnsLTpG0xZ80r6QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-27 13:46:11
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
mnsf
2026-09-27 07:05:09
(1 week ago)
Abuse Detected (9)
Brute-Force
Web App Attack
๐ธ๐ช
vaia.cloud
2026-09-27 00:10:01
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 14:51:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:51:35.312790 2026] [security2:error] [pid 1847:tid 1847] [client 34.101.172.16:48198] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.7livesahead.com"] [uri "/.git/config"] [unique_id "arfb92ThpNkAe7WStevK0QAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-26 14:12:11
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.172.16 (16.172.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 26 10:12:07.038175 2026] [security2:error] [pid 15873:tid 15873] [client 34.101.172.16:36588] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.78cardsofthetarot-tarotmancy-tarot-cards-and-tarot-readings.com"] [uri "/.git/config"] [unique_id "arfSt19J1YPOMQL5Chv-VgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฆ๐บ
screwlooseit.com.au
2026-09-26 10:48:02
(1 week ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
SG/Singapore/16.172.101.34.bc.googleusercontent.co ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
SG/Singapore/16.172.101.34.bc.googleusercontent.com
show less
Web App Attack
๐ซ๐ท
masterguru
2026-09-25 10:08:37
(1 week ago)
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b ...
show more
Remote Command Execution: Unix Command Injection (command without evasion). Pattern match "(?i)(?:b (932235-195)
show less
Hacking
๐ณ๐ฑ
Site.eu
2026-09-25 04:16:43
(1 week ago)
Excessive multi-domain requests
Brute-Force
๐ฉ๐ช
LRob
2026-09-24 19:24:32
(1 week ago)
This address is looking for secret files on our sites: .git directories, .env files, credential and ...
show more
This address is looking for secret files on our sites: .git directories, .env files, credential and configuration files, database dumps, backups. This is a targeted search for credentials to break into the sites, blocked at the first request. Please check the machine behind it for an attack tool or malware. | method: GET | path: /.git/config | 2026-09-24 19:24 UTC
show less
Hacking
Web App Attack