πͺπΈ
el-brujo
2026-10-08 07:15:58
(11 hours ago)
08/Oct/2026:09:15:57.952078 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client ...
show more
08/Oct/2026:09:15:57.952078 +0200Apache-Error: [file "apache2_util.c"] [line 271] [level 3] [client 34.146.160.38] ModSecurity: Warning. Pattern match "(?i)(?:\\\\\\\\x5c|(?:%(?:c(?:0%(?:[2aq]f|5c|9v)|1%(?:[19p]c|8s|af))|2(?:5(?:c(?:0%25af|1%259c)|2f|5c)|%46|f)|(?:(?:f(?:8%8)?0%8|e)0%80%a|bg%q)f|%3(?:2(?:%(?:%6|4)6|F)|5%%63)|u(?:221[56]|002f|EFC8|F025)|1u|5c)|0x(?:2f|5c)|\\\\\\\\/))(?:%(?:(?:f(?:(?:c%80|8)%8)?0%8 ..." at REQUEST_URI_RAW. [file "/etc/httpd/modsecurity.d/activated_rules/REQUEST-930-APPLICATION-ATTACK-LFI.conf"] [line "48"] [id "930100"] [msg "Path Traversal Attack (/../)"] [data "Matched Data: /..%252f found within REQUEST_URI_RAW: /@fs/..%252f..%252f..%252f..%252f..%252fproc/self/environ?raw??"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.5"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-lfi"] [tag "paranoia-level/1"] [tag "OWASP_CRS"] [tag "capec/1000/255/153/126"] [hostname "grafana.elhacker.net"] [uri "/@fs/..%2f..%2f..%2f..%2f..%
...
show less
Hacking
Web App Attack
π§πͺ
cmbplf
2026-10-08 05:35:49
(13 hours ago)
125 requests with url.path */@fs/*
Brute-Force
Bad Web Bot
π§πͺ
taivas.nl
2026-10-08 04:32:37
(14 hours ago)
Many_bad_calls
Web App Attack
πΈπ¬
Cloudkul Cloudkul
2026-10-07 22:49:07
(19 hours ago)
Attempted Brute Force on our application
Brute-Force
Web App Attack
Anonymous
2026-10-07 22:35:00
(20 hours ago)
Web App Attack
Brute-Force
Exploited Host
Web App Attack
π§π·
radardatelecom
2026-10-07 22:27:04
(20 hours ago)
Blocked by Radar da Telecom firewall β abuseipdb
Bad Web Bot
Web App Attack
π«π·
SpaceHost-Server
2026-10-07 22:21:28
(20 hours ago)
Brute-Force
Web App Attack
Anonymous
2026-10-07 22:19:04
(20 hours ago)
34.146.160.38 - - [08/Oct/2026:06:19:03 +0800] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" "Moz ...
show more
34.146.160.38 - - [08/Oct/2026:06:19:03 +0800] "GET /assets/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.146.160.38 - - [08/Oct/2026:06:19:03 +0800] "GET /dist/manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.146.160.38 - - [08/Oct/2026:06:19:03 +0800] "GET /webpack-stats.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.146.160.38 - - [08/Oct/2026:06:19:03 +0800] "GET /cc1h38f6rzegi03fhwwk HTTP/1.1" 404 196 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.146.160.38 - - [08/Oct/2026:06:19:04 +0800] "GET /manifest.json HTTP/1.1" 404 196 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.146.160.38 - - [08/Oc
...
show less
Bad Web Bot
Web App Attack
π©πͺ
grassau.com
2026-10-07 21:52:30
(20 hours ago)
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.146.160.38 (JP/Ja ...
show more
(apache-useragents) Failed apache-useragents trigger with match [redacted] from 34.146.160.38 (JP/Japan/Tokyo/Tokyo/38.160.146.34.bc.googleusercontent.com)
show less
Bad Web Bot
πΊπΈ
jcbriar
2026-10-07 21:13:23
(21 hours ago)
Searching for vulnerable scripts
Hacking
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-07 21:03:14
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.146.160.38 (38.160.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.160.38 (38.160.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 17:03:11.628003 2026] [security2:error] [pid 3987:tid 3987] [client 34.146.160.38:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "socialstudiesforkids.com"] [uri "/.htpasswd"] [unique_id "asazj4nXf2F0aPF8BFn1TgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
Savvii
2026-10-07 20:26:00
(22 hours ago)
20 attempts against mh-misbehave-ban on ethyl
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-07 20:07:34
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.146.160.38 (38.160.146.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.146.160.38 (38.160.146.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 07 16:07:30.487710 2026] [security2:error] [pid 21960:tid 21960] [client 34.146.160.38:53444] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sangalgano.info"] [uri "/build../.env"] [unique_id "asamghdnjJjF9_0NIHRXIgAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-07 20:06:34
(22 hours ago)
Fail2Ban apache-noscript
Bad Web Bot
π©πͺ
LRob
2026-10-07 19:37:21
(23 hours ago)
Not following 301 redirects β wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux ...
show more
Not following 301 redirects β wasted requests | method: GET | path: / | ua: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36
show less
Bad Web Bot