๐บ๐ธ
aks4226
2026-09-15 18:40:39
(5 hours ago)
Bot search, attacking common web applications.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:23:49
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:23:43.442872 2026] [security2:error] [pid 30000:tid 30000] [client 34.181.216.208:54038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "gcsmith.com"] [uri "/.git/config"] [unique_id "aqmNL8GApz9IOvCEjg6W5QAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 15:21:46
(9 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 11:21:38.794638 2026] [security2:error] [pid 21600:tid 21600] [client 34.181.216.208:46326] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "book-runningonempty.com"] [uri "/.git/config"] [unique_id "aqligsa09XTsgxdDBpaInAAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 08:44:45
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:210492) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 04:44:36.855102 2026] [security2:error] [pid 2496:tid 2496] [client 34.181.216.208:35714] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "bookofraphael.com"] [uri "/.git/config"] [unique_id "aqkFdLas5SwchCQn3rIh3AAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-07-01 04:06:02
(2 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx01,mx03,wa01,wa ...
show more
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx01,mx03,wa01,wa02]
show less
Bad Web Bot
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-07-01 01:07:01
(2 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [mx02]
Bad Web Bot
Web App Attack
๐บ๐ธ
mnsf
2026-06-25 21:14:03
(2 months ago)
Too many Status 40X (12)
Brute-Force
Web App Attack
๐ฆ๐น
neo72
2026-06-24 11:29:34
(2 months ago)
Detected malicious activity - bulk block
Brute-Force
Web App Attack
๐ฌ๐ง
thetomtaylor.co.uk
2026-06-24 06:07:02
(2 months ago)
Fail2Ban - [NGINX]WordPress Logins Sniffings on nginx-wordpress-sniffer ... [ice01,mx02,wa01,wa02]
Bad Web Bot
Web App Attack
๐ซ๐ท
Feelautom
2026-06-24 05:40:40
(2 months ago)
[FeelAutom Auto-Ban] AI Analyst: Score 160/200 avec 8 menaces PathScan sur t-ia-connect.com
Port Scan
๐ณ๐ฟ
Antinson
2026-06-24 05:25:59
(2 months ago)
Scraping with a high error ratio and request rate
Bad Web Bot
๐ฎ๐ฑ
Dolphi
2026-06-24 05:10:03
(2 months ago)
POST //xmlrpc.php
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-24 05:06:51
(2 months ago)
(mod_security) mod_security (id:225170) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercon ...
show more
(mod_security) mod_security (id:225170) triggered by 34.181.216.208 (208.216.181.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Jun 24 01:06:46.548470 2026] [security2:error] [pid 9842:tid 9842] [client 34.181.216.208:49985] ModSecurity: Access denied with code 403 (phase 2). Operator EQ matched 0 at REQUEST_COOKIES_NAMES. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/26_Apps_WordPress.conf"] [line "155"] [id "225170"] [rev "3"] [msg "COMODO WAF: Sensitive Information Disclosure Vulnerability in WordPress 4.7 (CVE-2017-5487)||thishouserestored.leonardodecaprio.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "WordPress"] [hostname "thishouserestored.leonardodecaprio.com"] [uri "/wp-json/wp/v2/users/"] [unique_id "ajtl5jJY3L3If6kFcVIhpAAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Vianpyro
2026-06-24 05:03:36
(2 months ago)
Honeypot: 30 request(s) in 0 min. Paths: //wp-includes/ID3/license.txt, //feed/, //xmlrpc.php, //blo ...
show more
Honeypot: 30 request(s) in 0 min. Paths: //wp-includes/ID3/license.txt, //feed/, //xmlrpc.php, //blog/wp-includes/wlwmanifest.xml, //web/wp-includes/wlwmanifest.xml. Method(s): GET. UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko). ASN: 396982 (Google LLC).
show less
Web App Attack
Bad Web Bot
Brute-Force
Hacking
๐ง๐ช
cmbplf
2026-06-24 05:02:47
(2 months ago)
20.064 requests in 1 hour (3w4d14h)
Brute-Force
Bad Web Bot