๐ธ๐ช
vaia.cloud
2026-10-11 05:05:02
(5 days ago)
crowdsecurity/http-sensitive-files
Brute-Force
Web App Attack
Anonymous
2026-10-11 03:46:35
(5 days ago)
34.79.71.46 - - [11/Oct/2026:05:46:34 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 301 169 "-" "Mozilla ...
show more
34.79.71.46 - - [11/Oct/2026:05:46:34 +0200] "GET /@fs/src/.env?raw?? HTTP/2.0" 301 169 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http:///search/)"
show less
Bad Web Bot
๐บ๐ธ
TPI-Abuse
2026-10-11 02:21:55
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:21:50.485445 2026] [security2:error] [pid 28679:tid 28679] [client 34.79.71.46:46774] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lobibilisim.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lobibilisim.com"] [uri "/z9x8c7v6b5-debug-trigger-lobibilisim.com"] [unique_id "asryvkZBEe_DQlkNEYhkswAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 02:06:06
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 22:05:58.559382 2026] [security2:error] [pid 29284:tid 29284] [client 34.79.71.46:42982] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||jasbemarketing.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "jasbemarketing.com"] [uri "/z9x8c7v6b5-debug-trigger-jasbemarketing.com"] [unique_id "asrvBv3crjRR1KLIYMjzEgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Phenix Info
2026-10-11 01:59:00
(5 days ago)
SmallGuard.fr/Prestashop Forbidden Ext.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 01:34:46
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:34:38.321437 2026] [security2:error] [pid 8493:tid 8493] [client 34.79.71.46:52876] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||digitalmarketing-group.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "digitalmarketing-group.com"] [uri "/z9x8c7v6b5-debug-trigger-digitalmarketing-group.com"] [unique_id "asrnrlwwlMvvrwONGXJa3AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-10-11 01:14:12
(5 days ago)
Excessive multi-domain requests
Brute-Force
๐บ๐ธ
TPI-Abuse
2026-10-11 01:06:48
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:06:39.640751 2026] [security2:error] [pid 17115:tid 17115] [client 34.79.71.46:58448] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bonefrog.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bonefrog.com"] [uri "/z9x8c7v6b5-debug-trigger-bonefrog.com"] [unique_id "asrhH-6UBb19CsZhaQfQ9wAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฌ๐ง
consul.to
2026-10-11 01:04:24
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ฎ
JLKnoch Software GmbH
2026-10-11 00:57:54
(5 days ago)
CrowdSec crowdsecurity/http-probing
Brute-Force
Web App Attack
Anonymous
2026-10-11 00:52:53
(5 days ago)
(mod_security) mod_security triggered on hostname [redacted])
SQL Injection
๐ท๐ด
clauss
2026-10-11 00:38:21
(5 days ago)
34.79.71.46 - - [11/Oct/2026:03:38:19 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root ...
show more
34.79.71.46 - - [11/Oct/2026:03:38:19 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.ssh/id_rsa&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-User/1.0; [email protected] )"
34.79.71.46 - - [11/Oct/2026:03:38:20 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
...
show less
Web App Attack
๐ซ๐ท
COMAITE
2026-10-11 00:31:00
(5 days ago)
Suspicious URL access.
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-11 00:26:05
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 20:25:57.522059 2026] [security2:error] [pid 20656:tid 20663] [client 34.79.71.46:50090] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bocsite.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bocsite.com"] [uri "/z9x8c7v6b5-debug-trigger-bocsite.com"] [unique_id "asrXlTo5qNU8hVwYWoxjoAAAAMI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-10 23:58:11
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.c ...
show more
(mod_security) mod_security (id:210730) triggered by 34.79.71.46 (46.71.79.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 19:58:07.426664 2026] [security2:error] [pid 30793:tid 30793] [client 34.79.71.46:60920] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||bmillernotary.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "bmillernotary.com"] [uri "/z9x8c7v6b5-debug-trigger-bmillernotary.com"] [unique_id "asrRD5YZW4ghPLuWGY6CbQAAACI"]
show less
Brute-Force
Bad Web Bot
Web App Attack