🇨🇭
TheCoon
2026-11-08 11:08:53
UTC ·
(2 days ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-24 16:30:29
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-23 06:35:31
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇨🇭
TheCoon
2026-10-21 06:57:35
UTC ·
(2 weeks ago)
Automated: Credential theft attempt - JSON bomb served
Web App Attack
Hacking
🇮🇳
evicky2002
2026-07-14 10:21:11
UTC ·
(3 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇮🇳
evicky2002
2026-07-09 06:00:00
UTC ·
(4 months ago)
Confirmed malicious by STILWaters CTI platform (score=100, sources=1)
Hacking
Brute-Force
SSH
🇺🇸
TPI-Abuse
2026-05-15 05:26:13
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:26:05.009663 2026] [security2:error] [pid 23677:tid 23 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 01:26:05.009663 2026] [security2:error] [pid 23677:tid 23677] [client 34.64.202.15:41846] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "marcelacalvet.com"] [uri "/.git/config"] [unique_id "agaubba0n3I06du1-N2ciQAAAAA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-05-15 04:50:06
UTC ·
(5 months ago)
IP banned by Fail2Ban in jail nginx-abusive-ips
Web App Attack
Brute-Force
Bad Web Bot
🇦🇹
BerndG17
2026-05-15 04:42:00
UTC ·
(5 months ago)
Suspicious bots/scanners
Web App Attack
Hacking
🇺🇸
TPI-Abuse
2026-05-15 04:35:14
UTC ·
(5 months ago)
(mod_security) mod_security (id:949110) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:35:03.951061 2026] [security2:error] [pid 28796:tid 28 ...
show more
(mod_security) mod_security (id:949110) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 00:35:03.951061 2026] [security2:error] [pid 28796:tid 28796] [client 34.64.202.15:38506] ModSecurity: Access denied with code 403 (phase 2). Operator GE matched 5 at TX:anomaly_score. [file "/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf"] [line "30"] [id "949110"] [msg "Inbound Anomaly Score Exceeded (Total Score: 5)"] [severity "CRITICAL"] [tag "application-multi"] [tag "language-multi"] [tag "platform-multi"] [tag "attack-generic"] [hostname "sunstrongmetal.com"] [uri "/.git/config"] [unique_id "agaid_ytDj6-SXRIxz7rMQAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
kommunos
2026-05-15 04:34:08
UTC ·
(5 months ago)
/.git/config
Web App Attack
🇺🇸
octageeks.com
2026-05-15 04:10:10
UTC ·
(5 months ago)
Wordpress malicious attack:[octablocked]
Web App Attack
🇫🇷
masterguru
2026-05-15 04:03:20
UTC ·
(5 months ago)
(modsec_5080) ModSec 5080: Infrastructure subdomain probe from 34.64.202.15 (KR/South Korea/15.202.64.34.bc.googleusercontent.com): 1 in the last 3600 secs (0-195)
Hacking
🇺🇸
TPI-Abuse
2026-05-15 03:53:07
UTC ·
(5 months ago)
(mod_security) mod_security (id:210492) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 23:53:02.685474 2026] [security2:error] [pid 21748:tid 21 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.64.202.15 (15.202.64.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 23:53:02.685474 2026] [security2:error] [pid 21748:tid 21748] [client 34.64.202.15:52934] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.lambdaclimateresearch.com"] [uri "/.git/config"] [unique_id "agaYngzol3RR7Q112kFVowAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
4server
2026-05-15 03:10:57
UTC ·
(5 months ago)
[FriMay1505:10:55.1941462026][security2:error][pid106246:tid106335][client34.64.202.15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOC ...
show more
[FriMay1505:10:55.1941462026][security2:error][pid106246:tid106335][client34.64.202.15:0]ModSecurity:Accessdeniedwithcode403\(phase2\).OperatorGEmatched5atTX:anomaly_score.[file\"/etc/apache2/conf.d/modsec_vendor_configs/OWASP3/rules/REQUEST-949-BLOCKING-EVALUATION.conf\"][line\"94\"][id\"949110\"][msg\"InboundAnomalyScoreExceeded\(TotalScore:10\)\"][severity\"CRITICAL\"][ver\"OWASP_CRS/3.3.9\"][tag\"application-multi\"][tag\"language-multi\"][tag\"platform-multi\"][tag\"attack-generic\"][hostname\"www.assistenza-pc-mac-ticino.artisteer-italia.org\"][uri\"/.git/config\"][unique_id\"agaOv7BZbnNZ_urdyVt_MwAAAJU\"]
show less
Port Scan
Brute-Force
Web App Attack
