🇺🇸
oralunal
2026-11-06 20:15:32
UTC ·
(4 days ago)
Banned by Fail2Ban - access.log - mavifinds
Web App Attack
Bad Web Bot
2026-11-06 19:19:33
UTC ·
(4 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
🇨🇭
4server
2026-11-06 18:57:53
UTC ·
(4 days ago)
[FriNov0619:57:50.6045422026][security2:error][pid2754681:tid2754793][client34.21.107.245:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQ ...
show more
[FriNov0619:57:50.6045422026][security2:error][pid2754681:tid2754793][client34.21.107.245:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Patternmatch\"\(\?:queryintrospectionquery\?\|__schema\\\\\\\\\?{\?\(\?:querytype\|types\?\)\)\?\\\\\\\\{\"atREQUEST_BODY.[file\"/etc/apache2/conf.d/modsec_rules/10_asl_rules.conf\"][line\"234\"][id\"344378\"][rev\"2\"][msg\"Atomicorp.comWAFRules:GraphQLInjectionAttackattempt\"][data\"MatchedData:__schema{types{foundwithinREQUEST_BODY:{\\\\x22query\\\\x22:\\\\x22{__schema{types{namefields{nameargs{namedefaultvalue}}}}}\\\\x22}\"][severity\"CRITICAL\"][tag\"SQLi\"][hostname\"avvnicolaurbani.ch\"][uri\"/graphql\"][unique_id\"au4jLp55845X7ymno1-fSQAAAIg\"]\,referer:https://avvnicolaurbani.ch
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 18:01:29
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.21.107.245 (245.107.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:01:26.022742 2026] [security2:error] [pid 28629:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.107.245 (245.107.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 13:01:26.022742 2026] [security2:error] [pid 28629:tid 28629] [client 34.21.107.245:54176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "brainstormer.soy"] [uri "/css../.env"] [unique_id "au4V9kIShyXi-vK5lT2BZwAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
hostsec_za
2026-11-06 17:55:10
UTC ·
(4 days ago)
cPanel/Webmail Auth Attack. 144 failed logins in 6 hours.
Brute-Force
🇪🇸
pipeline.es
2026-11-06 17:38:18
UTC ·
(4 days ago)
Web scanning / probing for vulnerable paths | URL: /blog/*/trackback/$ | Evidence: bojador.pt 34.21.107.245 - - [06/Nov/2026:18:35:58 +0100] \"GET /blog/*/trackback/$ HTTP/2.0\" 404 23359 \"-\" \"CCBot/2.0 (https://commoncrawl.org/faq/)\" GEOIP_COUNT ...
show more
Web scanning / probing for vulnerable paths | URL: /blog/*/trackback/$ | Evidence: bojador.pt 34.21.107.245 - - [06/Nov/2026:18:35:58 +0100] \"GET /blog/*/trackback/$ HTTP/2.0\" 404 23359 \"-\" \"CCBot/2.0 (https://commoncrawl.org/faq/)\" GEOIP_COUNTRY_CODE=US 22075 | ASN: GOOGLE-CLOUD-PLATFORM | Country: US
show less
Port Scan
Web App Attack
🇳🇱
Savvii
2026-11-06 16:54:24
UTC ·
(4 days ago)
32 attempts against mh-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-06 16:22:14
UTC ·
(4 days ago)
csagent: score 20.9: 404 noise floor x5, spoofed crawler UA x1, secrets grab x1; 2 domain(s) in 5s
Web App Attack
🇳🇱
Savvii
2026-11-06 15:50:37
UTC ·
(4 days ago)
20 attempts against mh-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
🇷🇴
clauss
2026-11-06 15:45:05
UTC ·
(4 days ago)
34.21.107.245 - - [06/Nov/2026:17:45:03 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 401 41287 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.21.107.245 - - [06/Nov/2026:17:45:05 +0200] "GET /telescope ...
show more
34.21.107.245 - - [06/Nov/2026:17:45:03 +0200] "GET /storage/logs/laravel.log HTTP/2.0" 401 41287 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"
34.21.107.245 - - [06/Nov/2026:17:45:05 +0200] "GET /telescope/requests HTTP/2.0" 404 3301 "-" "Mozilla/5.0 (compatible; Meta-ExternalFetcher/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
...
show less
Web App Attack
🇳🇱
Savvii
2026-11-06 15:28:15
UTC ·
(4 days ago)
34 attempts against mh_ha-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 15:08:00
UTC ·
(4 days ago)
35 attempts against mh-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
mnsf
2026-11-06 15:05:31
UTC ·
(4 days ago)
Too many Status 40X (13)
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 14:51:52
UTC ·
(4 days ago)
(mod_security) mod_security (id:210492) triggered by 34.21.107.245 (245.107.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:48.086342 2026] [security2:error] [pid 30301:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.21.107.245 (245.107.21.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 09:51:48.086342 2026] [security2:error] [pid 30301:tid 30301] [client 34.21.107.245:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.ccamp.dev"] [uri "/packages/.env"] [unique_id "au3phPtlPyyY-hBO6-4VLwAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 14:46:28
UTC ·
(4 days ago)
20 attempts against mh_ha-misbehave-ban on ec102950
Brute-Force
Bad Web Bot
Web App Attack
