2026-10-28 04:54:20
UTC ·
(2 weeks ago)
Aggressive web scan
Web App Attack
🇺🇸
TPI-Abuse
2026-10-28 01:01:37
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.66.161 (161.66.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:01:29.962174 2026] [security2:error] [pid 32151:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.66.161 (161.66.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 21:01:29.962174 2026] [security2:error] [pid 32151:tid 32151] [client 34.141.66.161:57076] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.bfpsamoa.com"] [uri "/admin/.env"] [unique_id "auFJaSINJ9KDbpSlLCE4kAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-10-27 23:32:48
UTC ·
(2 weeks ago)
107 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
2026-10-27 22:59:33
UTC ·
(2 weeks ago)
34.141.66.161 - - [28/Oct/2026:00:59:26 +0200] "GET / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.66.161 - - [28/Oct/2026:00:59:29 +0200] "GET /sitemap.xml HTTP/ ...
show more
34.141.66.161 - - [28/Oct/2026:00:59:26 +0200] "GET / HTTP/1.1" 403 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.66.161 - - [28/Oct/2026:00:59:29 +0200] "GET /sitemap.xml HTTP/1.1" 403 124 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
34.141.66.161 - - [28/Oct/2026:00:59:30 +0200] "GET /sitemap_index.xml HTTP/1.1" 403 124 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
34.141.66.161 - - [28/Oct/2026:00:59:32 +0200] "GET /credentials HTTP/1.1" 403 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.66.161 - - [28/Oct/2026:00:59:33 +0200] "GET /org/settings HTTP/1.1" 403 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.66.161 - - [28/Oct/2026:00:59:33 +0200] "GET /deployments HTTP/1.1" 403 184 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko)
...
show less
Bad Web Bot
Web App Attack
🇺🇸
antlac1
2026-10-27 12:21:12
UTC ·
(2 weeks ago)
crowdsecurity/http-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-27 10:33:04
UTC ·
(2 weeks ago)
(mod_security) mod_security (id:210492) triggered by 34.141.66.161 (161.66.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 06:32:57.419768 2026] [security2:error] [pid 9649:tid 9 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.141.66.161 (161.66.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 27 06:32:57.419768 2026] [security2:error] [pid 9649:tid 9649] [client 34.141.66.161:51112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.bgellis.com"] [uri "/config/.env"] [unique_id "auB92be02csWtKlxhAjDuAAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇦
SSH-Admin
2026-10-27 08:47:02
UTC ·
(2 weeks ago)
Probing for Exploits on ns56
Exploited Host
Web App Attack
🇳🇱
e.fierstra
2026-10-27 05:27:43
UTC ·
(2 weeks ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇩🇪
LRob
2026-10-26 18:46:39
UTC ·
(2 weeks ago)
Vulnerability scanning | host: mail.beton-cire-tahiti.com | method: GET | path: /sitemap.xml | ua: Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler) | src_port: 57614
Port Scan
Web App Attack
2026-10-26 12:30:54
UTC ·
(2 weeks ago)
XSS Attempt
Hacking
🇸🇬
naveeddaros
2026-10-26 10:59:03
UTC ·
(2 weeks ago)
HTTP Flood DDoS attack detected
Brute-Force
Bad Web Bot
🇨🇦
Etienne Pilon
2026-10-26 09:25:42
UTC ·
(2 weeks ago)
Observed 2026-10-26T09:25:42+00:00 to 2026-10-26T09:25:45+00:00 (UTC). HTTP: 161 requests to sensitive web paths. Permanent inbound IP block verified by Observatory (runtime and persistent firewall rule). Observed activity only; this is not proof of ...
show more
Observed 2026-10-26T09:25:42+00:00 to 2026-10-26T09:25:45+00:00 (UTC). HTTP: 161 requests to sensitive web paths. Permanent inbound IP block verified by Observatory (runtime and persistent firewall rule). Observed activity only; this is not proof of compromise.
show less
Web App Attack
🇳🇱
Site.eu
2026-10-26 08:26:30
UTC ·
(2 weeks ago)
Excessive 404/403 errors
Brute-Force
🇪🇸
robotstxt
2026-10-26 02:51:35
UTC ·
(2 weeks ago)
34.141.66.161 - - [26/Oct/2026:02:50:33 +0000] "GET /robots.txt HTTP/2.0" 403 124 "https://juegoscondados.com/robots.txt" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.141.66.161"
34.141.66.161 - - [26/Oct/2026:02:50:35 +0000] "GET /sitemap ...
show more
34.141.66.161 - - [26/Oct/2026:02:50:33 +0000] "GET /robots.txt HTTP/2.0" 403 124 "https://juegoscondados.com/robots.txt" "CCBot/2.0 (https://commoncrawl.org/faq/)" "-" edge="34.141.66.161"
34.141.66.161 - - [26/Oct/2026:02:50:35 +0000] "GET /sitemap.xml HTTP/2.0" 403 20 "https://juegoscondados.com/sitemap.xml" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexity-user)" "-" edge="34.141.66.161"
34.141.66.161 - - [26/Oct/2026:02:50:38 +0000] "GET /sitemap_index.xml HTTP/2.0" 403 3994 "https://juegoscondados.com/sitemap_index.xml" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)" "-" edge="34.141.66.161"
34.141.66.161 - - [26/Oct/2026:02:50:38 +0000] "GET /wp-content/cache/autoptimize/js/autoptimize_9db7c934875e12ad17c66c4a66641ded.js HTTP/2.0" 403 165 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36" "-" edge="34.141.66.161"
34.141
...
show less
Web App Attack
🇫🇷
masterguru
2026-10-26 02:03:30
UTC ·
(2 weeks ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX: ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-201)
show less
Bad Web Bot
