🇳🇱
homeshowdomain.nl
2026-09-06 22:01:40
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-09-05.
Web App Attack
SSH
Hacking
Anonymous
2026-09-06 05:04:56
UTC ·
(2 months ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-09-06 03:51:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:51:46.320905 2026] [security2:error] [pid 1527:tid 152 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:51:46.320905 2026] [security2:error] [pid 1527:tid 1527] [client 34.45.130.73:57448] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.gestiofiscal.com"] [uri "/.env.production"] [unique_id "apzjUkbsNDuuTRaO_SSmKwAAAEc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
Hazzard
2026-09-06 03:31:09
UTC ·
(2 months ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
🇫🇷
ELYAZ
2026-09-06 03:22:46
UTC ·
(2 months ago)
(y3) Failed access -byebye- from 34.45.130.73 (US/United States/73.130.45.34.bc.googleusercontent.com): (CF_ENABLE)
Hacking
🇫🇷
✨
2026-09-06 03:06:14
UTC ·
(2 months ago)
Domain : MailEnable WebMail
Rule : config
2026-09-06 03:02:25 ***hidden-privacy*** GET /wp-config.php~ - 443 - 34.45.130.73 crusader-worker/1.0 - 404 0 2 1525 109 125 - -
Hacking
SQL Injection
🇺🇸
TPI-Abuse
2026-09-06 03:00:51
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:00:47.468517 2026] [security2:error] [pid 19102:tid 19 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 23:00:47.468517 2026] [security2:error] [pid 19102:tid 19102] [client 34.45.130.73:55656] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "webmail.meridianranchdrc.org"] [uri "/wp-config.php.swp"] [unique_id "apzXXyWoA5GvFWbdEF24pwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇮🇹
ivanbiagi7
2026-09-06 02:51:27
UTC ·
(2 months ago)
Wazuh detected repeated HTTP client errors consistent with automated web probing. Wazuh rule=31151.
Web App Attack
🇳🇱
MyGlobalFlowers
2026-09-06 02:42:23
UTC ·
(2 months ago)
Multiple WAF Violations
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 02:36:02
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:35:56.304996 2026] [security2:error] [pid 31505:tid 31 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 22:35:56.304996 2026] [security2:error] [pid 31505:tid 31505] [client 34.45.130.73:55012] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "family.amgtr.com"] [uri "/wp-config.php.bak"] [unique_id "apzRjIYV3sYQVU_gKUrd7wAAAEA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-06 01:50:02
UTC ·
(2 months ago)
suspicious request in access.log
Web App Attack
🇮🇩
Burayot
2026-09-06 01:14:04
UTC ·
(2 months ago)
LF_MODSEC: (mod_security) mod_security (id:949110) triggered by 34.45.130.73 (US/United States/73.130.45.34.bc.googleusercontent.com): 2 in the last 3600 secs
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 01:13:23
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:13:16.556411 2026] [security2:error] [pid 4289:tid 428 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 21:13:16.556411 2026] [security2:error] [pid 4289:tid 4289] [client 34.45.130.73:57768] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mail.angeladuffin.com"] [uri "/.env.local"] [unique_id "apy-LIsJKkPAVTuhFAMFfwAAAF4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-09-06 00:34:12
UTC ·
(2 months ago)
(mod_security) mod_security (id:210730) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:34:05.637655 2026] [security2:error] [pid 30789:tid 30 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.45.130.73 (73.130.45.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Sep 05 20:34:05.637655 2026] [security2:error] [pid 30789:tid 30789] [client 34.45.130.73:48230] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.eventsetcinc.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.eventsetcinc.com"] [uri "/backup.sql"] [unique_id "apy0_T_hMuOfIJ4aoV6D_wAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
raph
2026-09-06 00:19:24
UTC ·
(2 months ago)
[Wordpress] crawler /wp-admin/*, /wp-content/*, etc.
Bad Web Bot
Web App Attack