Anonymous
2026-10-05 05:21:00
(20 hours ago)
Active reconnaissance against the web application.
Web App Attack
Web Spam
Hacking
๐ง๐ช
cmbplf
2026-10-05 04:57:56
(21 hours ago)
426 requests with url.path */@fs/*
159 requests with url.path */proc/*
Brute-Force
Bad Web Bot
๐บ๐ธ
gamabe
2026-10-05 04:33:05
(21 hours ago)
Detected crowdsecurity/http-dos-swithcing-ua attack pattern. Reported by CrowdSec IDS.
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-05 04:26:56
(21 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Mon Oct 05 00:26:51.022335 2026] [security2:error] [pid 15568:tid 15568] [client 34.62.223.48:43558] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sguard.co"] [uri "/userfiles"] [unique_id "asMnC7mfMdJJWdfWdikvJgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-05 04:15:54
(21 hours ago)
Excessive multi-domain requests
Brute-Force
๐ฌ๐ง
gigatech
2026-10-05 04:15:03
(21 hours ago)
Webserver Probing
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 03:58:50
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:58:44.732785 2026] [security2:error] [pid 23371:tid 23371] [client 34.62.223.48:53638] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "mobileonlinecasinos.co"] [uri "/.htpasswd"] [unique_id "asMgdOXwRXKgwMRNbdAHCQAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 03:41:13
(22 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 23:41:06.152049 2026] [security2:error] [pid 3636802:tid 3636810] [client 34.62.223.48:55854] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marinkovich.co"] [uri "/.htpasswd"] [unique_id "asMcUkrNtU-D4_HBQV0UPgAAAMY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 02:42:33
(23 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:42:26.399839 2026] [security2:error] [pid 683:tid 683] [client 34.62.223.48:42210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "jussetcotradinglimited.co"] [uri "/userfiles"] [unique_id "asMOkgNETXr4rneXoaZbawAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 02:03:23
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 22:03:18.225899 2026] [security2:error] [pid 29494:tid 29494] [client 34.62.223.48:55892] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "integratic.com.co"] [uri "/public../.env"] [unique_id "asMFZiIxGBxdiUIaqNEO5gAAACc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
โจ
2026-10-05 01:19:16
(1 day ago)
Domain : gunton.co
Rule : admin
2026-10-05 01:17:42 ***hidden-privacy*** GET /admin/login - 443 - 34 ...
show more
Domain : gunton.co
Rule : admin
2026-10-05 01:17:42 ***hidden-privacy*** GET /admin/login - 443 - 34.62.223.48 HTTP/2 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36 - gunton.co 404 0 2 1245 789 37 - -
show less
Hacking
SQL Injection
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-05 01:18:38
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 21:18:33.651403 2026] [security2:error] [pid 13279:tid 13279] [client 34.62.223.48:43580] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "h2ofall.co"] [uri "/.git/config"] [unique_id "asL66Vu5Pve1gsic5Vf1NgAAAC0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-05 00:56:30
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210492) triggered by 34.62.223.48 (48.223.62.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 04 20:56:26.416075 2026] [security2:error] [pid 23256:tid 23256] [client 34.62.223.48:46394] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "genesis7.co"] [uri "/.htpasswd"] [unique_id "asL1us7fhkOjsZUy7YJtowAAAAE"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
ELYAZ
2026-10-05 00:05:28
(1 day ago)
(y3) Failed access -byebye- from 34.62.223.48 (BE/Belgium/48.223.62.34.bc.googleusercontent.com): ( ...
show more
(y3) Failed access -byebye- from 34.62.223.48 (BE/Belgium/48.223.62.34.bc.googleusercontent.com): (CF_ENABLE)
show less
Hacking
๐ฎ๐น
VHosting
2026-10-04 23:30:04
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack