๐ซ๐ท
dynamix
2026-10-17 06:19:48
(3 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-17 05:40:25
(3 days ago)
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (61.100.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (61.100.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 17 01:40:21.322638 2026] [security2:error] [pid 16720:tid 16720] [client 34.45.100.61:50676] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pronio.com"] [uri "/wp-config.php_"] [unique_id "atMKRcRwrvLc-4VT0eUruAAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
gadix
2026-10-16 11:01:10
(4 days ago)
[16/Oct/2026:13:01:09.670442 +0200] atID9QyIxeB1BOU_PqAEJgAAAEE 34.45.100.61 52910 127.0.0.1 7080
[1 ...
show more
[16/Oct/2026:13:01:09.670442 +0200] atID9QyIxeB1BOU_PqAEJgAAAEE 34.45.100.61 52910 127.0.0.1 7080
[16/Oct/2026:13:01:09.911104 +0200] atID9dEQ1TxOgrMqGrgonwAAAA8 34.45.100.61 52922 127.0.0.1 7080
[16/
...
show less
Web App Attack
๐ฉ๐ช
tinect
2026-10-16 07:37:29
(4 days ago)
Gets ban for 4h for triggering tinect/http-sensitive-file-probe at root1.
Web App Attack
Anonymous
2026-10-16 00:20:09
(4 days ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ณ๐ฑ
Site.eu
2026-10-15 23:54:51
(4 days ago)
Excessive 404/403 errors
Brute-Force
๐บ๐ธ
Gabriel Camargo
2026-10-15 00:30:05
(5 days ago)
34.45.100.61 - - [14/Oct/2026:19:30:04 -0500] "GET /_wpeprivate/config.json HTTP/1.1" 301 178 "-" "M ...
show more
34.45.100.61 - - [14/Oct/2026:19:30:04 -0500] "GET /_wpeprivate/config.json HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Linux; Android 5.0.2; SAMSUNG SM-T800 Build/LRX22G) AppleWebKit/537.36 (KHTML, like Gecko) SamsungBrowser/3.0 Chrome/38.0.2125.102 Safari/537.36"
34.45.100.61 - - [14/Oct/2026:19:30:04 -0500] "GET /wp-config.php_ HTTP/1.1" 301 178 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/43.0.2357.134 Safari/537.36"
34.45.100.61 - - [14/Oct/2026:19:30:04 -0500] "GET /wp-config.php HTTP/1.1" 301 178 "-" "Mozilla/5.0 (X11; Linux x86_64; rv:28.0) Gecko/20100101 Firefox/28.0"
...
show less
Brute-Force
SSH
๐ธ๐ฎ
administrator
2026-10-14 22:16:55
(5 days ago)
2026-10-11 17:19:20,296 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 34.45.100.61
20 ...
show more
2026-10-11 17:19:20,296 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 34.45.100.61
2026-10-11 17:19:20,296 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 34.45.100.61
2026-10-11 17:19:20,296 fail2ban.actions [1080]: NOTICE [apache-badbots] Ban 34.45.100.61
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
๐ซ๐ท
dynamix
2026-10-14 18:51:05
(5 days ago)
Multiple WAF Violations
Web App Attack
๐บ๐ธ
IndigoRidge
2026-10-13 23:52:43
(6 days ago)
34.45.100.61 - - [13/Oct/2026:19:52:42 -0400] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 ( ...
show more
34.45.100.61 - - [13/Oct/2026:19:52:42 -0400] "GET /phpinfo.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4"
34.45.100.61 - - [13/Oct/2026:19:52:42 -0400] "GET /phpinfo.php HTTP/1.1" 404 4700 "-" "Mozilla/5.0 (iPad; CPU OS 8_4_1 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) GSA/8.0.57838 Mobile/12H321 Safari/600.1.4"
34.45.100.61 - - [13/Oct/2026:19:52:42 -0400] "GET /info.php HTTP/1.1" 301 162 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:38.0) Gecko/20100101 Firefox/38.0"
...
show less
Web App Attack
๐ซ๐ท
Zundapper
2026-10-13 20:41:30
(6 days ago)
34.45.100.61 - - [13/Oct/2026:22:41:18 +0200] "GET /_wpeprivate/config.json HTTP/1.1" 404 2346 "-" " ...
show more
34.45.100.61 - - [13/Oct/2026:22:41:18 +0200] "GET /_wpeprivate/config.json HTTP/1.1" 404 2346 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; managedpc; rv:11.0) like Gecko"
34.45.100.61 - - [13/Oct/2026:22:41:19 +0200] "GET /wp-config.php_ HTTP/1.1" 404 2346 "-" "Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.90 Safari/537.36"
34.45.100.61 - - [13/Oct/2026:22:41:21 +0200] "GET /wp-config.php~ HTTP/1.1" 404 2346 "-" "Mozilla/5.0 (Windows NT 6.1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/38.0.2125.111 Safari/537.36"
34.45.100.61 - - [13/Oct/2026:22:41:24 +0200] "GET /wp-config.php.tmp HTTP/1.1" 404 2346 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:34.0) Gecko/20100101 Firefox/34.0"
34.45.100.61 - - [13/Oct/2026:22:41:29 +0200] "GET /wp-config.bak HTTP/1.1" 404 2346 "-" "Mozilla/5.0 (iPhone; CPU iPhone OS 7_0 like Mac OS X) AppleWebKit/537.51.1 (KHTML, like Gecko) Version/7.0 Mobile/11A465 Safari/9537.53 BingPreview/1.0b"
...
show less
Web App Attack
Port Scan
๐ซ๐ท
dynamix
2026-10-13 14:27:14
(1 week ago)
Multiple WAF Violations
Web App Attack
๐ฌ๐ง
Apache
2026-10-10 16:06:14
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (US/United States/61.100.45.34.bc. ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (US/United States/61.100.45.34.bc.googleusercontent.com): 5 in the last 300 secs (CF_ENABLE)
show less
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 15:35:42
(1 week ago)
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (61.100.45.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.100.61 (61.100.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 11:35:38.073230 2026] [security2:error] [pid 21596:tid 21596] [client 34.45.100.61:51694] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "pseudospace.com"] [uri "/wp-config.php_"] [unique_id "aspbSlM5A6tlXIDMvQ_35gAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-10-10 14:07:49
(1 week ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking