๐ณ๐ฑ
Site.eu
2026-10-14 01:01:21
(4 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
andypiper
2026-10-14 01:00:41
(4 hours ago)
CrowdSec ban for AbuseIPDB Top List
Brute-Force
Web App Attack
๐ณ๐ฑ
debestelapp
2026-10-14 00:40:09
(5 hours ago)
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-14 00:15:50
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 20:15:45.592400 2026] [security2:error] [pid 23755:tid 23755] [client 34.2.136.10:36090] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agirlwithaguitar.com"] [uri "/.git/config"] [unique_id "as7JsbiGGPJUalWpp5AWywAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
LRob
2026-10-14 00:12:13
(5 hours ago)
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10 ...
show more
Secret file probe | method: GET | path: /.git/config | ua: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 23:50:41
(6 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 19:50:34.259228 2026] [security2:error] [pid 20630:tid 20630] [client 34.2.136.10:40658] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agingworkforcenews.com"] [uri "/.git/config"] [unique_id "as7DyhJB4flaMUL8-RitTQAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ง๐ช
cmbplf
2026-10-13 19:45:02
(10 hours ago)
143 requests with url.path *credentials.json
Brute-Force
Bad Web Bot
๐ฉ๐ช
snhosting
2026-10-13 18:24:31
(11 hours ago)
34.2.136.10 - - [13/Oct/2026:20:24:20 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 ( ...
show more
34.2.136.10 - - [13/Oct/2026:20:24:20 +0200] "GET /.git/config HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:20:24:20 +0200] "GET /.env HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:20:24:21 +0200] "GET /.env.local HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:20:24:21 +0200] "GET /.env.production HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:20:24:21 +0200] "GET /.env.staging HTTP/1.1" 200 1628 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
4server
2026-10-13 16:23:48
(13 hours ago)
[TueOct1318:23:44.3142172026][security2:error][pid1294239:tid1294250][client34.2.136.10:0]ModSecurit ...
show more
[TueOct1318:23:44.3142172026][security2:error][pid1294239:tid1294250][client34.2.136.10:0]ModSecurity:Accessdeniedwithcode403\(phase1\).Patternmatch\"\(\?i\)\(\?:/\(\?:\^\|/\)\\\\\\\\.\(env\|git\|svn\|hg\|DS_Store\)\|/\(\?:wp-config\|\\\\\\\\.htaccess\|\\\\\\\\.htpasswd\)\|\\\\\\\\.\(\?:sql\|bak\|old\|log\)\$\)\"atREQUEST_URI.[file\"/etc/apache2/conf.d/modsec_custom_rules.conf\"][line\"156\"][id\"960720\"][msg\"Forbiddenfileaccessattempt\"][severity\"CRITICAL\"][hostname\"agenziastella.ch.136-243-54-122.cpanel.site\"][uri\"/phpinfo.php.bak\"][unique_id\"as5bEN51rs1FsWYMPj3rFwAAAAE\"]
show less
Port Scan
Brute-Force
Web App Attack
๐ฎ๐น
Inartis
2026-10-13 16:20:53
(13 hours ago)
34.2.136.10 - - [13/Oct/2026:18:20:50 +0200] "GET /.git/config HTTP/1.1" 404 41620 "-" "Mozilla/5.0 ...
show more
34.2.136.10 - - [13/Oct/2026:18:20:50 +0200] "GET /.git/config HTTP/1.1" 404 41620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:18:20:52 +0200] "GET /.env HTTP/1.1" 404 41620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.2.136.10 - - [13/Oct/2026:18:20:52 +0200] "GET /.env.local HTTP/1.1" 404 41620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 10:09:07
(19 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Oct 13 06:09:00.920430 2026] [security2:error] [pid 25525:tid 25525] [client 34.2.136.10:38050] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agenticapocalypse.com"] [uri "/.git/config"] [unique_id "as4DPFxPNxVQ1RcGIHmjNwAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Omega Threat-ID
2026-10-13 10:01:07
(19 hours ago)
Omega Point Threat ID honeypot sensor observed: abuse-reported
Port Scan
๐บ๐ธ
Lee Daniel
2026-10-13 03:32:05
(1 day ago)
34.2.136.10 - - [12/Oct/2026:23:32:05 -0400] "GET /.env HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (X11; Li ...
show more
34.2.136.10 - - [12/Oct/2026:23:32:05 -0400] "GET /.env HTTP/1.1" 403 6282 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
DDoS Attack
Web Spam
Email Spam
Port Scan
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-13 02:44:48
(1 day ago)
Aggressive web scan
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-13 01:24:09
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.2.136.10 (10.136.2.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 12 21:24:03.208456 2026] [security2:error] [pid 9920:tid 9920] [client 34.2.136.10:52408] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "agenesis7.com"] [uri "/.git/config"] [unique_id "as2IM_VY7DfXLTKwHsquZwAAABE"]
show less
Brute-Force
Bad Web Bot
Web App Attack