Anonymous
2026-09-08 03:21:04
(1 hour ago)
Multiple web server 400 error codes from same source ip
Web App Attack
Anonymous
2026-09-08 03:04:31
(1 hour ago)
Web probing (374 hits in 24h) on kernoverlegsibbe-ijzeren.nl: sensitive-path scans and/or 404 bursts ...
show more
Web probing (374 hits in 24h) on kernoverlegsibbe-ijzeren.nl: sensitive-path scans and/or 404 bursts. Reported by CRMON.
show less
Web App Attack
🇳🇱
melroy89
2026-09-08 02:31:42
(2 hours ago)
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux ...
show more
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "GET / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "kernel.melroy.org" 0.003
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "kernel.melroy.org" 0.000
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "kernel.melroy.org" 0.040
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "kernel.melroy.org" 0.036
34.19.146.61 - - [08/Sep/2026:04:30:23 +0200] "POST / HTTP/1.1" 403 93 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.3
...
show less
Web App Attack
🇸🇪
vaia.cloud
2026-09-08 01:15:02
(3 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-08 00:25:07
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 20:24:59.991807 2026] [security2:error] [pid 31806:tid 31806] [client 34.19.146.61:48618] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennythompson.com"] [uri "/.git/config"] [unique_id "ap9V2-4EF2jVD4XUTAJd5AAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:35:07
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:35:01.618113 2026] [security2:error] [pid 21824:tid 21824] [client 34.19.146.61:35014] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennedysplace.com"] [uri "/.git/config"] [unique_id "ap88FUcRiJ88fXuSgNaeoQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 22:11:02
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 18:10:54.902379 2026] [security2:error] [pid 30159:tid 30159] [client 34.19.146.61:48158] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kennedimoore.click"] [uri "/.git/config"] [unique_id "ap82bu4ftvtJChOtqnYLKwAAABI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 21:46:01
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 17:45:57.601841 2026] [security2:error] [pid 12342:tid 12342] [client 34.19.146.61:40186] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kenmalone.com"] [uri "/.git/config"] [unique_id "ap8wldAR6DCzQslzviY3SAAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-09-07 17:08:17
(11 hours ago)
14.770 4xx requests in 1 hour (1w5d6h)
Brute-Force
Bad Web Bot
🇩🇪
marten_o
2026-09-07 16:22:08
(12 hours ago)
34.19.146.61 - - [07/Sep/2026:18:22:08 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 21888 "-" "Mozilla ...
show more
34.19.146.61 - - [07/Sep/2026:18:22:08 +0200] "GET /tmp/phpinfo.php HTTP/1.1" 404 21888 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" 315 22834
...
show less
Web App Attack
🇫🇷
Octopuce
2026-09-07 15:58:16
(12 hours ago)
Aggressive web search of vulnerable pages: /.env /.env.local /app/.env /apps/.env /api/.env ...
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 13:58:19
(14 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 09:58:14.645766 2026] [security2:error] [pid 1964:tid 2014] [client 34.19.146.61:38840] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kemalinal.com"] [uri "/.git/config"] [unique_id "ap7C9m6AG9MZWN7a5BzPtgAAAIc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-07 13:15:00
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.19.146.61 (61.146.19.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Sep 07 09:14:56.604312 2026] [security2:error] [pid 3679:tid 3679] [client 34.19.146.61:42178] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "kelvinlouie.com"] [uri "/.git/config"] [unique_id "ap640FXkvDtuiaB8zQSAogAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-07 13:00:13
(15 hours ago)
Excessive multi-domain requests
Brute-Force
🇦🇺
screwlooseit.com.au
2026-09-07 12:02:33
(16 hours ago)
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/61.146.19.34.bc.googleusercontent ...
show more
Blocked by CSF 13 firewall - Rule: config-dotfile
US/United States/61.146.19.34.bc.googleusercontent.com
show less
Web App Attack