🇺🇸
TPI-Abuse
2026-11-06 09:05:29
UTC ·
(2 minutes ago)
(mod_security) mod_security (id:248270) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:05:22.950602 2026] [security2:error] [pid 4964:tid 4964] ...
show more
(mod_security) mod_security (id:248270) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 04:05:22.950602 2026] [security2:error] [pid 4964:tid 4964] [client 34.58.81.60:16894] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||stat-alliance.com|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "stat-alliance.com"] [uri "/"] [unique_id "au2YUveJqo6x6ewL8wOeAgAAAA4"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 08:02:01
UTC ·
(1 hour ago)
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:01:56.845984 2026] [security2:error] [pid 22255:tid 2225 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 03:01:56.845984 2026] [security2:error] [pid 22255:tid 22255] [client 34.58.81.60:22236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "askthetarotcards.com"] [uri "/.git/HEAD"] [unique_id "au2JdOsd7a3gUi1flQsqjQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Alt255
2026-11-06 06:46:50
UTC ·
(2 hours ago)
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.58.81.60 - - [06/Nov/2026:07:46:45 +0100] "GET /.env HTTP/1.1" 301 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTM ...
show more
[ti-24al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.58.81.60 - - [06/Nov/2026:07:46:45 +0100] "GET /.env HTTP/1.1" 301 514 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
🇲🇾
Rizzy
2026-11-06 06:16:27
UTC ·
(2 hours ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
Mundo Bueno
2026-11-06 05:59:55
UTC ·
(3 hours ago)
[ISILIA Protection v2.3] Tentative d'accès: /.git/info/refs [RATE LIMITED - 1800s quarantine] | Pays: US | UA: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Sa
Hacking
Web App Attack
🇳🇱
Eric
2026-11-06 05:26:33
UTC ·
(3 hours ago)
[Fri Nov 06 05:26:20.355017 2026] [security2:error] [pid 942924:tid 942924] [client 34.58.81.60:0] [client 34.58.81.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/r ...
show more
[Fri Nov 06 05:26:20.355017 2026] [security2:error] [pid 942924:tid 942924] [client 34.58.81.60:0] [client 34.58.81.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [ver "OWASP_CRS/3.3.4"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "pop-the-slots.com"] [uri "/.git/HEAD"] [unique_id "au1k_F53XaugALcdvWSnagAAABQ"]
[Fri Nov 06 05:26:33.063303 2026] [security2:error] [pid 945377:tid 945377] [client 34.58.81.60:0] [client 34.58.81.60] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/usr/share/modsecurity-crs/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "94"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRIT
...
show less
Hacking
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:31:07
UTC ·
(4 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:31:01.961867 2026] [security2:error] [pid 18714:tid 1871 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:31:01.961867 2026] [security2:error] [pid 18714:tid 18714] [client 34.58.81.60:27472] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "tyllo.com"] [uri "/.git/HEAD"] [unique_id "au1YBbtCyiclwuT1ea8F5gAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-06 04:23:06
UTC ·
(4 hours ago)
20 attempts against mh-misbehave-ban on milky
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-06 04:04:13
UTC ·
(5 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:04:09.526787 2026] [security2:error] [pid 29312:tid 2931 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.58.81.60 (60.81.58.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 23:04:09.526787 2026] [security2:error] [pid 29312:tid 29312] [client 34.58.81.60:19374] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "calvetparis1937.com"] [uri "/.git/HEAD"] [unique_id "au1RuWGducqcNMWdhv99BAAAAAQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
consul.to
2026-11-06 03:47:26
UTC ·
(5 hours ago)
Web attack/malicious scanning detected
Web App Attack
🇧🇪
cmbplf
2026-11-06 03:28:22
UTC ·
(5 hours ago)
249 requests with url.path *config.json
152 requests with url.path *.aws/*
138 requests with url.path *.svn/*
135 requests with url.path *.hg/*
Brute-Force
Bad Web Bot
🇩🇪
Vegascosmetics
2026-11-06 02:33:02
UTC ·
(6 hours ago)
Kingcopy.org AI-IDS (Vegas Cosmetics shop): auto-blocked after first-seen suspicion / AbuseIPDB reputation policy (no URL signature). Evidence: Suspicion-Ban (Score 81>=65, Abuse 93, NonEU, first-seen)
Hacking
Exploited Host
Web App Attack
🇩🇪
altenglaner
2026-11-06 01:57:32
UTC ·
(7 hours ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
Hacking
Web App Attack
🇿🇦
Megasurf
2026-11-06 00:40:24
UTC ·
(8 hours ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇩🇪
wpadm4
2026-11-05 23:04:29
UTC ·
(10 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
