🇩🇪
macrob
2026-09-12 06:01:09
(4 hours ago)
2026/09/12 06:01:07 [error] 760325#760325: *3349118 access forbidden by rule, client: 34.38.112.131, ...
show more
2026/09/12 06:01:07 [error] 760325#760325: *3349118 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "membercenter.sponvista.com"
2026/09/12 06:01:07 [error] 760321#760321: *3349116 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /api/.env HTTP/2.0", host: "membercenter.sponvista.com"
2026/09/12 06:01:08 [error] 760325#760325: *3349121 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "membercenter.sponvista.com"
...
show less
Web App Attack
🇺🇸
TPI-Abuse
2026-09-12 05:13:28
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.38.112.131 (131.112.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.38.112.131 (131.112.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 12 01:13:21.061980 2026] [security2:error] [pid 25725:tid 25725] [client 34.38.112.131:34626] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.spontaneouscombustibles.com"] [uri "/.git/config"] [unique_id "aqTfcccuDHUbmJb5z25gewAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
macrob
2026-09-12 01:16:56
(9 hours ago)
2026/09/12 01:16:55 [error] 555591#555591: *2729888 access forbidden by rule, client: 34.38.112.131, ...
show more
2026/09/12 01:16:55 [error] 555591#555591: *2729888 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /admin HTTP/2.0", host: "gmarket.sponvista.com"
2026/09/12 01:16:55 [error] 555596#555596: *2729881 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /admin/login HTTP/2.0", host: "gmarket.sponvista.com"
2026/09/12 01:16:55 [error] 555594#555594: *2729927 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.env.js HTTP/2.0", host: "gmarket.sponvista.com"
...
show less
Web App Attack
🇩🇪
macrob
2026-09-11 22:30:03
(12 hours ago)
2026/09/11 22:30:00 [error] 555596#555596: *2397838 access forbidden by rule, client: 34.38.112.131, ...
show more
2026/09/11 22:30:00 [error] 555596#555596: *2397838 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /admin HTTP/2.0", host: "console.sponvista.com"
2026/09/11 22:30:00 [error] 555596#555596: *2397864 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /admin/login HTTP/2.0", host: "console.sponvista.com"
2026/09/11 22:30:00 [error] 555592#555592: *2397852 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.env?raw HTTP/2.0", host: "console.sponvista.com"
...
show less
Web App Attack
🇫🇷
SpaceHost-Server
2026-09-11 22:20:03
(12 hours ago)
Brute-Force
Web App Attack
🇩🇪
macrob
2026-09-11 20:07:23
(14 hours ago)
2026/09/11 20:07:22 [error] 555596#555596: *2065443 access forbidden by rule, client: 34.38.112.131, ...
show more
2026/09/11 20:07:22 [error] 555596#555596: *2065443 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.gitlab-ci.yml HTTP/2.0", host: "auth.sponvista.com"
2026/09/11 20:07:22 [error] 555592#555592: *2065444 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.git/HEAD HTTP/2.0", host: "auth.sponvista.com"
2026/09/11 20:07:22 [error] 555592#555592: *2065449 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.git/config HTTP/2.0", host: "auth.sponvista.com"
...
show less
Web App Attack
🇩🇪
macrob
2026-09-11 18:01:17
(16 hours ago)
2026/09/11 18:01:14 [error] 555594#555594: *1741142 access forbidden by rule, client: 34.38.112.131, ...
show more
2026/09/11 18:01:14 [error] 555594#555594: *1741142 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /backend/.env HTTP/2.0", host: "11st.sponvista.com"
2026/09/11 18:01:14 [error] 555596#555596: *1741159 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.aws/config HTTP/2.0", host: "11st.sponvista.com"
2026/09/11 18:01:14 [error] 555594#555594: *1741158 access forbidden by rule, client: 34.38.112.131, server: fn.binixo.es, request: "GET /.aws/credentials HTTP/2.0", host: "11st.sponvista.com"
...
show less
Web App Attack
🇫🇷
dynamix
2026-09-11 17:39:22
(17 hours ago)
Multiple WAF Violations
Web App Attack
🇬🇧
consul.to
2026-09-11 17:29:44
(17 hours ago)
Web attack/malicious scanning detected
Web App Attack
2026-09-11 17:28:41
(17 hours ago)
IP matched detection query bad paths many.
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-09-11 17:16:07
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.38.112.131 (131.112.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.38.112.131 (131.112.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 13:16:04.433835 2026] [security2:error] [pid 2459:tid 2459] [client 34.38.112.131:55784] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sprektech.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sprektech.com"] [uri "/z9x8c7v6b5-debug-trigger-sprektech.com"] [unique_id "aqQ3VEeDY3T7jo7W6nHKgAAAACQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-09-11 17:16:04
(17 hours ago)
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encod ...
show more
HTTP header is restricted by policy (/x-middleware-subrequest/). String match within "/content-encoding/ /proxy/ /lock-token/ /content-range/ /if/ /x-http-method-override/ /x-http-method/ /x-method-override/ /x-middleware-subrequest/ /expect/" at TX:header_name_920450_x-middleware-subrequest. (920450-197)
show less
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-11 16:51:43
(17 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.38.112.131 (131.112.38.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.38.112.131 (131.112.38.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Sep 11 12:51:37.354295 2026] [security2:error] [pid 29167:tid 29167] [client 34.38.112.131:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||sportsbookcommission.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "sportsbookcommission.com"] [uri "/z9x8c7v6b5-debug-trigger-sportsbookcommission.com"] [unique_id "aqQxmWlwib76eLFupv-QhAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
COMAITE
2026-09-11 16:47:38
(18 hours ago)
Common web attack from 34.38.112.131.
Web App Attack
🇮🇹
VHosting
2026-09-11 16:35:03
(18 hours ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
