2026-10-17 13:57:27
(7 minutes ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 13:22:51
(42 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.182.138.40 (40.138.182.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.138.40 (40.138.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 09:22:47.357861 2026] [security2:error] [pid 5534:tid 5534] [client 34.182.138.40:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.portfoliolighting.net"] [uri "/.htpasswd"] [unique_id "atN2p-e-poc7tASUh8GqeQAAABM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
Baking333
2026-10-17 13:22:03
(42 minutes ago)
[redacted] 34.182.138.40 - - [17/Oct/2026:14:22:01 +0100] "GET /.[redacted] HTTP/1.1" 200 5423 0/344 ...
show more
[redacted] 34.182.138.40 - - [17/Oct/2026:14:22:01 +0100] "GET /.[redacted] HTTP/1.1" 200 5423 0/34401 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://[redacted]/crawler)" 443 [redacted] 34.182.138.40 - - [17/Oct/2026:14:22:01 +0100] "GET /.[redacted] HTTP/1.1" 200 169 0/59800 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://[redacted]/support/amazonbot)" 443
show less
Bad Web Bot
Web App Attack
2026-10-17 13:16:39
(48 minutes ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇳🇱
Alt255
2026-10-17 12:41:24
(1 hour ago)
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[ti-11al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.182.138.40 - - [17/Oct/2026:14:41:17 +0200] "GET /.git/config HTTP/2.0" 404 1856 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
...
show less
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-10-17 12:40:48
(1 hour ago)
20 attempts against mh-misbehave-ban on frost
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-17 07:29:25
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.182.138.40 (40.138.182.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.182.138.40 (40.138.182.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 03:29:21.244529 2026] [security2:error] [pid 20033:tid 20033] [client 34.182.138.40:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mx.neurocolors.com"] [uri "/server/.env"] [unique_id "atMj0RCfzAdQwUYCsQGlLgAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
nasset
2026-10-17 05:28:47
(8 hours ago)
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /secure HTTP/1.1" 403 6368 "-" "Mozilla/5.0 (Mac ...
show more
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /secure HTTP/1.1" 403 6368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /signin HTTP/1.1" 403 6368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /internal HTTP/1.1" 403 6368 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /admin/users HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.182.138.40 - - [16/Oct/2026:22:28:46 -0700] "GET /api-keys HTTP/1.1" 403 584 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153
...
show less
Bad Web Bot
Web App Attack
🇯🇵
tttomomi
2026-10-17 03:54:12
(10 hours ago)
Repeated probing for credential and configuration files, and for known webshell and remote-code-exec ...
show more
Repeated probing for credential and configuration files, and for known webshell and remote-code-execution endpoints, on our web server. Every request was refused with a 4xx status; none returned content. Paths probed: /.npmrc, /docker-compose.yaml, /Dockerfile.
show less
Web App Attack
🇳🇱
ConsulHosting
2026-10-16 16:14:20
(21 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
🇺🇸
mnsf
2026-10-16 16:05:55
(21 hours ago)
Too many Status 40X (21)
Scanning/Probing (41)
Brute-Force
Web App Attack
🇫🇮
tjs
2026-10-16 06:59:00
(1 day ago)
web attack
Hacking
Web App Attack
🇵🇱
Budyn
2026-10-16 05:19:47
(1 day ago)
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit ...
show more
Automated threat detected by Budyn Honeypot Sinkhole. Attack type: CRITICAL: ModSecurity WAF Exploit Block. Malicious scanner triggered a security trap targeting emulated vulnerabilities. Evidence: HOST: nexus.budyn.ovh | URI: /dist/.vite/manifest.json | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 | BODY: [Empty / GET Request]
show less
Hacking
Web App Attack
🇧🇪
taivas.nl
2026-10-16 04:33:29
(1 day ago)
Many_bad_calls
Web App Attack
🇺🇸
interbiznw.com
2026-10-16 02:53:00
(1 day ago)
malicious-web-requests-vulnerability-scanning
Hacking
Brute-Force
Exploited Host
Web App Attack