🇨🇭
TheCoon
2026-11-08 11:00:49
UTC ·
(3 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-11-03 18:50:08
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:50:02.078223 2026] [security2:error] [pid 10990:tid 10 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 13:50:02.078223 2026] [security2:error] [pid 10990:tid 10990] [client 34.101.59.48:52686] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "surveyiowa.com"] [uri "/.git/config"] [unique_id "auos2jBjdKk4qnZv04RNrgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-03 09:00:22
UTC ·
(1 week ago)
| [Dangerous/Indonesia] Aggressive IP 34.101.59.48 (~30 hits). Type: DoS Defender- Web server 400 error code
Web App Attack
Hacking
SQL Injection
🇳🇱
e.fierstra
2026-11-03 08:25:33
UTC ·
(1 week ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-03 06:16:43
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:16:37.660958 2026] [security2:error] [pid 4428:tid 442 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Nov 03 01:16:37.660958 2026] [security2:error] [pid 4428:tid 4428] [client 34.101.59.48:46808] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.air-comfort-inc.sophcomp.com"] [uri "/.git/config"] [unique_id "aul8Rao3cn8vUVr41O538QAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
zynex
2026-11-03 06:16:14
UTC ·
(1 week ago)
URL Probing: /app/.env
Web App Attack
2026-11-03 03:49:12
UTC ·
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
2026-11-03 03:32:59
UTC ·
(1 week ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇳🇱
Savvii
2026-11-03 01:10:51
UTC ·
(1 week ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
TheCoon
2026-11-02 21:34:44
UTC ·
(1 week ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
Origon
2026-11-02 21:19:03
UTC ·
(1 week ago)
plesk-modsecurity - IP: 34.101.59.48 - [02/Nov/2026:22:19:02.519806 +0100] auj-Rrv9wSv9UKbJAoWGBQAAABA 34.101.59.48 34644 127.0.0.1 7081 [02/Nov/2026:22:19:02.880861 +0100] auj-Rrv9wSv9UKbJAoWGCQAAAAw 34.101.59.48 34676 127.0.0.1 7081 [02/Nov/2026:2 ...
show more
plesk-modsecurity - IP: 34.101.59.48 - [02/Nov/2026:22:19:02.519806 +0100] auj-Rrv9wSv9UKbJAoWGBQAAABA 34.101.59.48 34644 127.0.0.1 7081 [02/Nov/2026:22:19:02.880861 +0100] auj-Rrv9wSv9UKbJAoWGCQAAAAw 34.101.59.48 34676 127.0.0.1 7081 [02/Nov/2026:22:19:03.058173 +0100] auj-R7v9wSv9UKbJAoWGCwAAAAM 34.101.59.48 34684 127.0.0.1 7081 [02/Nov/2026:22:19:03.235860 +0100] auj-R5vYruis2Bdp8VwzswAAAIE 34.101.59.48 34714 127.0.0.1 7081
show less
Web App Attack
🇫🇷
dynamix
2026-11-02 20:55:46
UTC ·
(1 week ago)
Multiple WAF Violations
Web App Attack
🇨🇭
4server
2026-11-02 19:10:34
UTC ·
(1 week ago)
[MonNov0220:10:29.1871222026][security2:error][pid599178:tid599242][client34.101.59.48:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\ ...
show more
[MonNov0220:10:29.1871222026][security2:error][pid599178:tid599242][client34.101.59.48:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"swisservers.com\"][uri\"/\"][unique_id\"aujgJTUzBHNUMIuHhfN6LgAAAFM\"]
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-02 19:07:42
UTC ·
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:07:38.748390 2026] [security2:error] [pid 15090:tid 15 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.101.59.48 (48.59.101.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Nov 02 14:07:38.748390 2026] [security2:error] [pid 15090:tid 15090] [client 34.101.59.48:58230] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "swhowell.com"] [uri "/.git/config"] [unique_id "aujfeotP3TPmZfic2RZofAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-02 17:09:59
UTC ·
(1 week ago)
[web.zebs.ch] httpd-config-scan: sites=www.swisscybertech.ch; logs=/var/log/httpd/access_log,/var/log/httpd/domains/swisscybertech.ch.log; samples=/.git/config | /.env | /.env.local
Hacking
Web App Attack
