๐ฌ๐ท
setupgr
2026-06-17 20:38:34
(4 months ago)
(mod_security) mod_security (id:11000011) triggered by 34.125.234.45 (US/United States/Nevada/Las Ve ...
show more
(mod_security) mod_security (id:11000011) triggered by 34.125.234.45 (US/United States/Nevada/Las Vegas/-/[AS396982 GOOGLE-CLOUD-PLATFORM]): 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Wed Jun 17 23:38:31.961624 2026] [security2:error] [pid 2210295:tid 2210443] [client 34.125.234.45:33992] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "googleusercontent.com" at REMOTE_HOST. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "131"] [id "11000011"] [msg "BLOCKED BAD DOMAIN: 45.234.125.34.bc.googleusercontent.com"] [severity "CRITICAL"] [hostname "ftiaxtomonosou.gr"] [uri "/wp-content/uploads/2019/07/%CE%93%CF%81%CE%B1%CF%86%CE%B5%CE%AF%CE%BF-%CE%A3%CF%8D%CE%BD%CE%B8%CE%B5%CF%83%CE%B7-%CE%9D%CE%BF-399_10.jpg"] [unique_id "ajMFx4Hi3fYqxwKQHNazegAAAdE"]
show less
Port Scan
๐บ๐ธ
TPI-Abuse
2026-05-30 05:18:57
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 34.125.234.45 (45.234.125.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.125.234.45 (45.234.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat May 30 01:18:49.268547 2026] [security2:error] [pid 21934:tid 21934] [client 34.125.234.45:35438] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.147|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.147"] [uri "/.config/gcloud/credentials.db"] [unique_id "ahpzOZOBbmOYa8hjv_nt8gAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฟ
Antinson
2026-05-30 05:04:55
(4 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐ณ๐ฑ
Savvii
2026-05-30 04:28:34
(4 months ago)
20 attempts against mh-misbehave-ban on storm
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ท
ggb_st
2026-05-30 01:50:04
(4 months ago)
[2026-05-30 01:50:03] 34.125.234.45 triggered a honeypot. Requested on port 80. URI: /v2/actuator/he ...
show more
[2026-05-30 01:50:03] 34.125.234.45 triggered a honeypot. Requested on port 80. URI: /v2/actuator/heapdump, UA: HTC_Dream Mozilla/5.0 (Linux; U; Android 1.5; en-ca; Build/CUPCAKE) AppleWebKit/528.5 (KHTML, like Gecko) Version/3.1.2 Mobile Safari/525.20.1
...
show less
Bad Web Bot
Brute-Force
Web App Attack
Hacking
SQL Injection
๐ง๐พ
lns.bz
2026-05-29 01:51:40
(4 months ago)
.env scanning [BY]
Web App Attack
๐ซ๐ท
dynamix
2026-05-29 01:49:50
(4 months ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-05-28 23:53:50
(4 months ago)
(mod_security) mod_security (id:210730) triggered by 34.125.234.45 (45.234.125.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.125.234.45 (45.234.125.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 28 19:53:45.035181 2026] [security2:error] [pid 14477:tid 14477] [client 34.125.234.45:55330] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||192.64.150.97|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "192.64.150.97"] [uri "/.config/gcloud/credentials.db"] [unique_id "ahjViWnPS8nqo_p9ozFkdwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐บ
Albram
2026-05-28 23:32:05
(4 months ago)
Tries find Web server vulnerability (IP: 34.125.234.45)
Hacking
Web App Attack
๐ญ๐ฐ
Harold Wong
2026-05-28 22:54:00
(4 months ago)
$f2bV_matches
Brute-Force
๐ซ๐ท
adembaysal
2025-07-02 21:58:05
(1 year ago)
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy* ...
show more
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy*** GET /.git/config - 443 - 34.125.234.45 HTTP/1.1 - - inventorypromanager.bahukukyazilim.com 404 8 0 1541 117 1096 - -
show less
Hacking
SQL Injection
๐ซ๐ท
adembaysal
2025-05-26 21:11:06
(1 year ago)
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy* ...
show more
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy*** GET /.git/config - 443 - 34.125.234.45 HTTP/1.1 - - inventorypromanager.bahukukyazilim.com 404 8 0 1541 117 1096 - -
show less
Hacking
SQL Injection
๐ซ๐ท
adembaysal
2025-05-25 21:00:02
(1 year ago)
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy* ...
show more
Domain : inventorypromanager.bahukukyazilim.com
Rule : config
2025-05-24 20:24:42 ***hidden-privacy*** GET /.git/config - 443 - 34.125.234.45 HTTP/1.1 - - inventorypromanager.bahukukyazilim.com 404 8 0 1541 117 1096 - -
show less
Hacking
SQL Injection
๐ฌ๐ง
openstrike.co.uk
2025-05-25 05:12:58
(1 year ago)
2 attacks on VC URLs:
GET /.git/config HTTP/1.1
Hacking
๐บ๐ธ
octageeks.com
2025-05-25 04:08:13
(1 year ago)
Wordpress malicious attack:[octablocked]
Web App Attack