🇺🇸
TPI-Abuse
2026-09-16 16:11:27
(23 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 12:11:24.418415 2026] [security2:error] [pid 15151:tid 15151] [client 34.154.73.7:47402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asiaan.net"] [uri "/.git/config"] [unique_id "aqq_rOnpYyv4fzclfxHbWQAAABA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
Mendip_Defender
2026-09-16 15:41:18
(53 minutes ago)
34.154.73.7 - - [16/Sep/2026:16:41:31 +0100] "GET /phpinfo.php HTTP/1.1" 301 5675 "-" "Mozilla/5.0 ( ...
show more
34.154.73.7 - - [16/Sep/2026:16:41:31 +0100] "GET /phpinfo.php HTTP/1.1" 301 5675 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.73.7 - - [16/Sep/2026:16:41:32 +0100] "GET /info.php HTTP/1.1" 301 5672 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.154.73.7 - - [16/Sep/2026:16:41:32 +0100] "GET /php.php HTTP/1.1" 301 5671 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 15:17:06
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 11:16:57.744094 2026] [security2:error] [pid 4505:tid 4505] [client 34.154.73.7:46570] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "ashotofcoffee.com"] [uri "/.git/config"] [unique_id "aqqy6RGU_cMyAFZXokusYQAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇸🇪
vaia.cloud
2026-09-16 13:05:04
(3 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
2026-09-16 13:03:07
(3 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇪🇸
robotstxt
2026-09-16 12:57:21
(3 hours ago)
34.154.73.7 - - [16/Sep/2026:12:56:48 +0000] "POST / HTTP/1.1" 403 20669 "-" "Mozilla/5.0 (X11; Linu ...
show more
34.154.73.7 - - [16/Sep/2026:12:56:48 +0000] "POST / HTTP/1.1" 403 20669 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.154.73.7"
34.154.73.7 - - [16/Sep/2026:12:56:48 +0000] "POST / HTTP/1.1" 403 20669 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.154.73.7"
34.154.73.7 - - [16/Sep/2026:12:56:50 +0000] "GET /.git/config HTTP/1.1" 403 20092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.154.73.7"
34.154.73.7 - - [16/Sep/2026:12:56:53 +0000] "GET /.env HTTP/1.1" 403 20092 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.154.73.7"
34.154.73.7 - - [16/Sep/2026:12:56:54 +0000] "GET /.env.local HTTP/1.1" 403 20093 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-16 12:56:17
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 16 08:56:13.465894 2026] [security2:error] [pid 15300:tid 15304] [client 34.154.73.7:33140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "asetiadi.net"] [uri "/.git/config"] [unique_id "aqqR7Qv1cVZ423rw7e54XQAAAYI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
DasBiberlein
2026-09-15 23:09:39
(17 hours ago)
RdpGuard detected brute-force attempt on HTTP
Brute-Force
🇩🇪
4server
2026-09-15 18:48:46
(21 hours ago)
[TueSep1520:48:41.7858482026][security2:error][pid3647414:tid3647671][client34.154.73.7:0]ModSecurit ...
show more
[TueSep1520:48:41.7858482026][security2:error][pid3647414:tid3647671][client34.154.73.7:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:\\\\\\\\\$\(\?:\\\\\\\\\(\(\?:\\\\\\\\\(.\*\\\\\\\\\)\|.\*\)\\\\\\\\\)\|\\\\\\\\{.\*\\\\\\\\}\)\|[\<\>]\\\\\\\\\(.\*\\\\\\\\\)\)\"atARGS:0.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"396\"][id\"393655\"][rev\"17\"][msg\"Atomicorp.comWAFRules:PossibleRemoteCommandExecution:UnixShellExpressionFound\"][data\"MatchedData:\$\(\(41\*271\)\)foundwithinARGS:0:{then:\$1:__proto__:thenstatus:resolved_modelreason:-1value:{then:\$b1337}_response:{_prefix:varres=process.mainmodule.require\(child_process\).execsync\(echo\$\(\(41\*271\)\)\|base64-w0\).tostring\(\).trim\(\)throwobject.assign\(newerror\(next_redirect\){digest:\`next_redirectpush/login\?a=\${res}307\`}\)_chunks:\$q2_formdata:{get:\$1:constructor:constructor}}}\"][tag\"attack-rce\"][hostname\"autodiscover.ecosuber.com\"][uri\"/\"][unique_id\"aqmTCbk5tjbYg0mZ-iwvBwAAAUE\"]
show less
Port Scan
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-15 17:28:06
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.154.73.7 (7.73.154.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:28:01.578358 2026] [security2:error] [pid 6898:tid 6908] [client 34.154.73.7:39858] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "autodiscover.earthtravel.net"] [uri "/.git/config"] [unique_id "aqmAIdXkXEDEfEkNEOkLvAAAAUg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
DyhnenTv
2026-09-15 16:24:10
(1 day ago)
CrowdSec webserver: crowdsecurity/http-sensitive-files
Web App Attack
Bad Web Bot
🇮🇹
VHosting
2026-09-15 14:55:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇫🇷
phoenix1jl96
2026-09-15 14:17:21
(1 day ago)
2026/09/15 16:17:20 [error] 1507858#1507858: *4597 open() "/home/user-data/www/default/mailer/.env" ...
show more
2026/09/15 16:17:20 [error] 1507858#1507858: *4597 open() "/home/user-data/www/default/mailer/.env" failed (2: No such file or directory), client: 34.154.73.7, server: autodiscover.dsatec.info, request: "GET /mailer/.env HTTP/1.1", host: "autodiscover.dsatec.info"
2026/09/15 16:17:21 [error] 1507858#1507858: *4597 open() "/usr/local/lib/roundcubemail/.env" failed (2: No such file or directory), client: 34.154.73.7, server: autodiscover.dsatec.info, request: "GET /mail/.env HTTP/1.1", host: "autodiscover.dsatec.info"
...
show less
DNS Compromise
DNS Poisoning
DDoS Attack
Ping of Death
Web Spam
Email Spam
Blog Spam
Port Scan
Hacking
Brute-Force
Bad Web Bot
SSH
Web App Attack