๐ณ๐ฑ
Site.eu
2026-09-03 09:11:07
(1 hour ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
Mendip_Defender
2026-09-03 08:50:19
(2 hours ago)
[03/Sep/2026:09:50:30.766815 +0100] apk01n_J9HtEudQq3gSuqwAAAIA 34.14.160.72 45614 188.246.206.60 70 ...
show more
[03/Sep/2026:09:50:30.766815 +0100] apk01n_J9HtEudQq3gSuqwAAAIA 34.14.160.72 45614 188.246.206.60 7081
[03/Sep/2026:09:50:31.269307 +0100] apk013_J9HtEudQq3gSurQAAAI8 34.14.160.72 45624 188.246.206.60 7081
...
show less
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-03 07:20:08
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 03 03:19:59.609051 2026] [security2:error] [pid 22253:tid 22253] [client 34.14.160.72:56508] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4windsmedia.com"] [uri "/.git/config"] [unique_id "apkfn4pnm4aT_C7lKIvS7QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฎ๐ฉ
Burayot
2026-09-03 05:48:26
(5 hours ago)
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.14.160.72 (IN/India/72.160.14.34 ...
show more
LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 34.14.160.72 (IN/India/72.160.14.34.bc.googleusercontent.com): 1 in the last 3600 secs
show less
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 03:57:14
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 23:57:08.175062 2026] [security2:error] [pid 29917:tid 29917] [client 34.14.160.72:39570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4tee2stock.fynyx.com"] [uri "/.git/config"] [unique_id "apjwFMt9_Af7CmyT_LnBlAAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-03 03:27:54
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 23:27:50.750857 2026] [security2:error] [pid 29793:tid 29793] [client 34.14.160.72:37500] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4starpromotions.com"] [uri "/.git/config"] [unique_id "apjpNjqNMlR-is2Fgny5kgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ท๐บ
DZBOT
2026-09-03 03:17:23
(7 hours ago)
DZBOT: Website Scanning / Scraping
Bad Web Bot
Exploited Host
Web App Attack
๐จ๐ญ
4server
2026-09-03 02:48:31
(8 hours ago)
[ThuSep0304:48:28.3057122026][security2:error][pid2395406:tid2395878][client34.14.160.72:0]ModSecuri ...
show more
[ThuSep0304:48:28.3057122026][security2:error][pid2395406:tid2395878][client34.14.160.72:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"4server.ch\"][uri\"/\"][unique_id\"apjf_GsIovFipqc9hLwlyAAAAMc\"]
show less
Hacking
Web App Attack
๐ซ๐ท
dynamix
2026-09-03 02:47:56
(8 hours ago)
Multiple WAF Violations
Web App Attack
๐ฉ๐ช
Philister11
2026-09-03 01:52:37
(9 hours ago)
CrowdSec: crowdsecurity/http-sensitive-files (IN/AS396982)
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-09-03 01:13:35
(9 hours ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-09-03 00:46:12
(10 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 20:46:06.742625 2026] [security2:error] [pid 21759:tid 21759] [client 34.14.160.72:43582] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4photogifts.com"] [uri "/.git/config"] [unique_id "apjDTshAuxzJJFfMnoEO_wAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
SCHAPPY
2026-09-03 00:43:30
(10 hours ago)
Brute-force attack to non-existent web resources, HTTP code 404.
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-02 22:39:20
(12 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.14.160.72 (72.160.14.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 02 18:39:13.438544 2026] [security2:error] [pid 4678:tid 4678] [client 34.14.160.72:47880] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "4md.lol"] [uri "/.git/config"] [unique_id "apilkVcVSuUD2FqQjkHlHAAAABY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ฎ
paissangroup
2026-09-02 22:21:41
(12 hours ago)
Multiple WAF Violations
Web App Attack