๐บ๐ธ
TPI-Abuse
2026-10-19 05:24:05
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.104.203.249 (249.203.104.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.104.203.249 (249.203.104.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 19 01:24:00.714712 2026] [security2:error] [pid 13005:tid 13005] [client 34.104.203.249:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "concealed.cloudex.click"] [uri "/.git/config"] [unique_id "atWpcCc_4jbEBYktZievFwAAACU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Alt255
2026-10-19 03:06:03
(5 hours ago)
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail ngin ...
show more
[cb-06al] Excessive 404 errors (web scanning): 25 suspicious requests detected by fail2ban jail nginx-404. Example: 34.104.203.249 - - [19/Oct/2026:05:05:55 +0200] "GET /dist/.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.104.203.249 - - [19/Oct/2026:05:05:55 +0200] "GET /.vite/manifest.json HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
34.104.203.249 - - [19/Oct/2026:05:05:55 +0200] "POST /lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; OAI-SearchBot/1.0; +https://openai.com/searchbot"
34.104.203.249 - - [19/Oct/2026:05:05:56 +0200] "POST /icecoder/lib/terminal-xhr.php HTTP/2.0" 404 1338 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
๐จ๐ฟ
antihack.anarchista.xyz
2026-10-19 01:32:44
(7 hours ago)
404 burst: 20 hits in 5 min, URI /wp-admin/js/password-strength-meter.min.js.map, Ref , UA Mozilla/5 ...
show more
404 burst: 20 hits in 5 min, URI /wp-admin/js/password-strength-meter.min.js.map, Ref , UA Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
show less
Brute-Force
Web App Attack
Bad Web Bot
๐จ๐ฆ
Mediashaker
2026-10-19 00:38:59
(8 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.104.203.249 (JP/J ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.104.203.249 (JP/Japan/249.203.104.34.bc.googleusercontent.com)
show less
Bad Web Bot
๐ฉ๐ช
raph
2026-10-18 23:41:39
(9 hours ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Roderic
2026-10-18 23:19:32
(9 hours ago)
Insights: ModSecurity blocked 111 requests within 2 hours on 1 site (file inclusion, data leakage pr ...
show more
Insights: ModSecurity blocked 111 requests within 2 hours on 1 site (file inclusion, data leakage probing, protocol abuse)
show less
Web App Attack
๐ซ๐ท
SpaceHost-Server
2026-10-18 22:18:38
(10 hours ago)
Brute-Force
Web App Attack
๐ซ๐ท
LoneRider
2026-10-18 22:05:54
(10 hours ago)
[19/Oct/2026:00:05:53.818671 +0200] atVCwdSwcXyivUG8RxtSGAAAAAA 34.104.203.249 50934 127.0.0.1 7081
...
show more
[19/Oct/2026:00:05:53.818671 +0200] atVCwdSwcXyivUG8RxtSGAAAAAA 34.104.203.249 50934 127.0.0.1 7081
[19/Oct/2026:00:05:53.919841 +0200] atVCwe63poGsG9AHsL97KwAAAA4 34.104.203.249 50980 127.0.0.1 7081
[19/Oct/2026:00:05:53.948436 +0200] atVCwdSwcXyivUG8RxtSGQAAAAA 34.104.203.249 50986 127.0.0.1 7081
...
show less
Hacking
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-10-18 22:00:42
(10 hours ago)
Report By Secure Gateway Security Team: Unsolicited Connection Attempt
Hacking
๐บ๐ธ
ALSCOยฎ๏ธ
2026-10-18 22:00:42
(10 hours ago)
Report By ALSCO Security Team: Unsolicited Connection Attempt
Hacking
๐บ๐ธ
ipblock.com
2026-10-18 21:51:00
(11 hours ago)
IPBlock protected site ID [3390-wh].
Exploit request, vulnerability scanner.
Hacking
Bad Web Bot
Web App Attack
๐ง๐ท
ICS Labs
2026-10-18 21:34:38
(11 hours ago)
ICS Labs threat intelligence (ICS Feeds): Brute-Force. Last observed 2026-10-18 UTC.
Brute-Force
๐ณ๐ฑ
Savvii
2026-10-18 19:27:52
(13 hours ago)
20 attempts against mh-misbehave-ban on ozone
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-10-18 18:57:27
(13 hours ago)
34.104.203.249 - - [18/Oct/2026:18:56:27 +0000] "GET /robots.txt HTTP/2.0" 403 195 "-" "Mozilla/5.0 ...
show more
34.104.203.249 - - [18/Oct/2026:18:56:27 +0000] "GET /robots.txt HTTP/2.0" 403 195 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; GPTBot/1.4; +https://openai.com/gptbot" "-" edge="34.104.203.249"
34.104.203.249 - - [18/Oct/2026:18:56:29 +0000] "GET /z9x8c7v6b5-debug-trigger-paulinas.es HTTP/2.0" 403 27757 "-" "Mozilla/5.0 (compatible; Meta-ExternalAgent/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)" "-" edge="34.104.203.249"
34.104.203.249 - - [18/Oct/2026:18:56:29 +0000] "GET /build/manifest.json HTTP/2.0" 403 26328 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.104.203.249"
34.104.203.249 - - [18/Oct/2026:18:56:29 +0000] "GET /dist/manifest.json HTTP/2.0" 403 26359 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36" "-" edge="34.104.203.249"
34.104.203.249 - - [18/Oct/2026:18:56:29 +0000] "
...
show less
Web App Attack
๐ฉ๐ช
macrob
2026-10-18 18:52:17
(14 hours ago)
2026/10/18 18:52:14 [error] 1616725#1616725: *12188121 access forbidden by rule, client: 34.104.203. ...
show more
2026/10/18 18:52:14 [error] 1616725#1616725: *12188121 access forbidden by rule, client: 34.104.203.249, server: binixo.pl, request: "GET /dist/.vite/manifest.json HTTP/2.0", host: "binixo.pl"
2026/10/18 18:52:14 [error] 1616725#1616725: *12183423 access forbidden by rule, client: 34.104.203.249, server: binixo.pl, request: "GET /.vite/manifest.json HTTP/2.0", host: "binixo.pl"
2026/10/18 18:52:16 [error] 1616725#1616725: *12151994 access forbidden by rule, client: 34.104.203.249, server: binixo.pl, request: "GET /.gitlab-ci.yml HTTP/2.0", host: "binixo.pl"
...
show less
Web App Attack