๐ฉ๐ช
wpadm4
2026-09-20 23:25:49
(42 minutes ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
MBombeck
2026-09-20 23:04:09
(1 hour ago)
Fail2Ban/traefik-botsearch on ops-01.bombeck.io: banned after 5 failures
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 21:08:00
(3 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 17:07:54.886747 2026] [security2:error] [pid 7668:tid 7668] [client 34.48.34.28:51424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oposicionesyconcursos.es"] [uri "/.git/config"] [unique_id "arBLKnzlD3412UhAy1xoywAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ช๐ธ
robotstxt
2026-09-20 21:06:47
(3 hours ago)
34.48.34.28 - - [20/Sep/2026:21:06:34 +0000] "POST / HTTP/1.1" 403 22563 "-" "Mozilla/5.0 (Windows N ...
show more
34.48.34.28 - - [20/Sep/2026:21:06:34 +0000] "POST / HTTP/1.1" 403 22563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.48.34.28"
34.48.34.28 - - [20/Sep/2026:21:06:34 +0000] "POST / HTTP/1.1" 403 22563 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.48.34.28"
34.48.34.28 - - [20/Sep/2026:21:06:35 +0000] "GET /.git/config HTTP/1.1" 403 21239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.48.34.28"
34.48.34.28 - - [20/Sep/2026:21:06:35 +0000] "GET /.env HTTP/1.1" 403 21239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36" "-" edge="34.48.34.28"
34.48.34.28 - - [20/Sep/2026:21:06:36 +0000] "GET /.env.local HTTP/1.1" 403 21239 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) Ap
...
show less
Web App Attack
๐ธ๐ช
nekopavel
2026-09-20 20:28:11
(3 hours ago)
34.48.34.28 - - [20/Sep/2026:22:28:09 +0200]"GET /.git/config HTTP/1.1" 404 804"-" opnsense.home.pav ...
show more
34.48.34.28 - - [20/Sep/2026:22:28:09 +0200]"GET /.git/config HTTP/1.1" 404 804"-" opnsense.home.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "-""Washington" "US"
34.48.34.28 - - [20/Sep/2026:22:28:09 +0200]"GET /.env HTTP/1.1" 404 804"-" opnsense.home.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "-""Washington" "US"
34.48.34.28 - - [20/Sep/2026:22:28:09 +0200]"GET /.env.local HTTP/1.1" 404 804"-" opnsense.home.pavel.gg "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36""0.000" "-""Washington" "US"
...
show less
Hacking
Bad Web Bot
Web App Attack
Anonymous
2026-09-20 19:46:11
(4 hours ago)
Bot / seems abusive / Apache connections: 50
DDoS Attack
Web Spam
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 19:41:26
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 15:41:23.348261 2026] [security2:error] [pid 15224:tid 15271] [client 34.48.34.28:34038] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "oplconnect.com"] [uri "/.git/config"] [unique_id "arA240sX1x8GyyDxJvtTUgAAAYo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
WeCloudit-Anti-Abuse
2026-09-20 19:30:01
(4 hours ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-sensitive-files
Web App Attack
Hacking
๐ซ๐ฎ
paissangroup
2026-09-20 18:41:11
(5 hours ago)
Multiple WAF Violations
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-20 18:32:58
(5 hours ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
ConsulHosting
2026-09-20 18:04:22
(6 hours ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐บ๐ฆ
URAN Publishing Service
2026-09-20 17:53:57
(6 hours ago)
[20/Sep/2026:20:53:56 +0300] -- 34.48.34.28 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/c ...
show more
[20/Sep/2026:20:53:56 +0300] -- 34.48.34.28 Ban reason: Scanner [CMS_GENERIC] | Request: GET /.git/config HTTP/1.1
show less
Bad Web Bot
Web App Attack
๐ฉ๐ช
FD-IX
2026-09-20 17:07:44
(7 hours ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-20 17:00:21
(7 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210492) triggered by 34.48.34.28 (28.34.48.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Sep 20 13:00:17.491470 2026] [security2:error] [pid 3421:tid 3421] [client 34.48.34.28:54260] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "opere.com"] [uri "/.git/config"] [unique_id "arARIR91Nk2hEQGfv1nJfAAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
MarkGGN
2026-09-20 16:29:43
(7 hours ago)
Web attack. 34.48.34.28 - - [20/Sep/2026:18:29:43 +0200] "GET /info.php HTTP/1.1" 401 574 "-" "Mozil ...
show more
Web attack. 34.48.34.28 - - [20/Sep/2026:18:29:43 +0200] "GET /info.php HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.48.34.28 - - [20/Sep/2026:18:29:43 +0200] "GET /pi.php HTTP/1.1" 401 574 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
show less
Web App Attack