🇧🇾
lns.bz
2026-09-19 08:30:16
(17 hours ago)
Too many 404 requests [BY]
Web App Attack
🇮🇳
evicky2002
2026-09-19 06:00:05
(19 hours ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
brightenfield
2026-09-19 05:18:41
(20 hours ago)
Web App Attack
Web App Attack
🇩🇪
netclix.gr
2026-09-19 05:18:19
(20 hours ago)
(mod_security) mod_security triggered on hostname [redacted] 34.32.76.169 (DE/Germany/169.76.32.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.32.76.169 (DE/Germany/169.76.32.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
🇸🇪
vaia.cloud
2026-09-19 04:10:01
(21 hours ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
🇳🇱
e.fierstra
2026-09-18 23:22:10
(1 day ago)
ModSecurity hits exceeded
Bad Web Bot
Web App Attack
🇺🇸
Starburst SysOp Team
2026-09-18 22:51:50
(1 day ago)
Malware host detected by rbl.malware.expert. RBL lookup of 169.76.32.34.rbl.malware.expert succeeded ...
show more
Malware host detected by rbl.malware.expert. RBL lookup of 169.76.32.34.rbl.malware.expert succeeded at REMOTE_ADDR. (400010-mnz6-4)
show less
Hacking
🇺🇸
TPI-Abuse
2026-09-18 17:49:01
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 13:48:55.930647 2026] [security2:error] [pid 32308:tid 32308] [client 34.32.76.169:51410] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mnice.help"] [uri "/.git/config"] [unique_id "aq15hzW3jAANaoyXTEIlbQAAABU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-09-18 14:35:43
(1 day ago)
Excessive multi-domain requests
Brute-Force
2026-09-18 14:02:04
(1 day ago)
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env HTTP/1.1, POST / HTTP/1.1, GET /.e ...
show more
Bot / scanning and/or hacking attempts: GET / HTTP/1.1, GET /.env HTTP/1.1, POST / HTTP/1.1, GET /.env.development HTTP/1.1, GET /.env.staging HTTP/1.1, GET /.env.local HTTP/1.1
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 13:56:27
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 09:56:20.497225 2026] [security2:error] [pid 4640:tid 4640] [client 34.32.76.169:39334] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mnalabama.com"] [uri "/.git/config"] [unique_id "aq1DBBVqLriX7vvWNxphuAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
ger-stg-sifi1
2026-09-18 10:26:57
(1 day ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
🇺🇦
URAN Publishing Service
2026-09-18 10:14:54
(1 day ago)
[18/Sep/2026:13:14:53 +0300] -- 34.32.76.169 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/ ...
show more
[18/Sep/2026:13:14:53 +0300] -- 34.32.76.169 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-18 07:59:41
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.32.76.169 (169.76.32.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 18 03:59:38.510924 2026] [security2:error] [pid 9271:tid 9271] [client 34.32.76.169:32820] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mms-boss.net"] [uri "/.git/config"] [unique_id "aqzvatxrfde501esgyjgDwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇮
oh.mg
2026-09-18 07:17:41
(1 day ago)
[Fri Sep 18 09:17:40.346897 2026] [security2:error] [pid 3436900:tid 3436924] [client 34.32.76.169:0 ...
show more
[Fri Sep 18 09:17:40.346897 2026] [security2:error] [pid 3436900:tid 3436924] [client 34.32.76.169:0] [client 34.32.76.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation"] [tag "OWASP_CRS"] [hostname "eu.mmn.ca"] [uri "/"] [unique_id "aqzllC0zb1fHvdlYOvBeIQAAABY"]
[Fri Sep 18 09:17:40.576412 2026] [security2:error] [pid 3436900:tid 3436903] [client 34.32.76.169:0] [client 34.32.76.169] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:blocking_inbound_anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "233"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 50)"] [ver "OWASP_CRS/4.10.0-dev"] [tag "anomaly-evaluation
...
show less
Web App Attack
Bad Web Bot