🇺🇸
TPI-Abuse
2026-06-08 14:27:59
(5 minutes ago)
(mod_security) mod_security (id:210492) triggered by 34.48.190.69 (69.190.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.190.69 (69.190.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 10:27:55.750499 2026] [security2:error] [pid 3553:tid 3553] [client 34.48.190.69:37446] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.eweekmaine.arsenaultartistmanagement.com"] [uri "/config/config.yml"] [unique_id "aibRaz8N_XpXICo7QbLfPAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-06-08 11:57:08
(2 hours ago)
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000- ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "YaBrowser" at REQUEST_HEADERS:User-Agent. (1100000-195)
show less
Bad Web Bot
🇩🇪
updown.io
2026-06-08 11:40:30
(2 hours ago)
{"level":"info","ts":1780918829.5910997,"logger":"http.log.access.log1","msg":"handled request","req ...
show more
{"level":"info","ts":1780918829.5910997,"logger":"http.log.access.log1","msg":"handled request","request":{"remote_ip":"34.48.190.69","remote_port":"46440","client_ip":"34.48.190.69","proto":"HTTP/1.1","method":"GET","host":"aupdate.yxwvutsrqtsrqlbnnkwkyxzxwww8bab2a5f-df77-4330-8c52-284b6b1ab1f1.random.159.89.98.98.nip.io","uri":"/actuator/configprops","headers":{"User-Agent":["Mozilla/5.0 (Linux; U; Android 4.4.2; en-us; GT-P5210 Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 Safari/534.30"],"Accept-Charset":["utf-8"],"Accept-Encoding":["gzip"],"Connection":["close"]}},"bytes_read":0,"user_id":"","duration":0.000073141,"size":0,"status":308,"resp_headers":{"Location":["https://aupdate.yxwvutsrqtsrqlbnnkwkyxzxwww8bab2a5f-df77-4330-8c52-284b6b1ab1f1.random.159.89.98.98.nip.io/actuator/configprops"],"Content-Type":[],"Server":["Caddy"],"Connection":["close"]}}
{"level":"info","ts":1780918829.6023138,"logger":"http.log.access.log1","msg":"handled request","request":{"rem
...
show less
DDoS Attack
Web App Attack
🇳🇱
Site.eu
2026-06-08 11:29:41
(3 hours ago)
Excessive 404/403 errors
Brute-Force
🇫🇷
Octopuce
2026-06-08 09:13:47
(5 hours ago)
Aggressive web search of vulnerable pages: /php.php /phpinfo.php /info.php /debug.php /test.php /adm ...
show more
Aggressive web search of vulnerable pages: /php.php /phpinfo.php /info.php /debug.php /test.php /admin/phpinfo.php /phptest.php /api/phpinfo.ph ...
show less
Web App Attack
🇩🇪
EGP Abuse Dept
2026-06-08 06:57:18
(7 hours ago)
Scanning for web/db/file exploits on www.uniekewijnen.nl
SQL Injection
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-06-08 06:13:12
(8 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.190.69 (69.190.48.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.190.69 (69.190.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Jun 08 02:13:08.137753 2026] [security2:error] [pid 2297:tid 2297] [client 34.48.190.69:59522] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/config/config.yml" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "med.garnetcreek.com"] [uri "/config/config.yml"] [unique_id "aiZddIR24wirYdDdUAqgYwAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-06-08 05:03:21
(9 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇬🇧
Aetherweb Ark
2026-06-08 04:32:14
(10 hours ago)
(mod_security) mod_security (id:949110) triggered by 34.48.190.69 (US/United States/69.190.48.34.bc. ...
show more
(mod_security) mod_security (id:949110) triggered by 34.48.190.69 (US/United States/69.190.48.34.bc.googleusercontent.com): N in the last X secs
show less
Web App Attack
🇫🇷
masterguru
2026-06-08 03:50:16
(10 hours ago)
Restricted File Access Attempt. Matched phrase "Dockerfile" at REQUEST_FILENAME. (930130-131)
Hacking
Web App Attack
🇮🇹
VHosting
2026-06-08 02:35:03
(11 hours ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack