🇺🇸
TPI-Abuse
2026-11-09 04:36:40
UTC ·
(15 hours ago)
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:36:32.461821 2026] [security2:error] [pid 25882:tid 25 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 23:36:32.461821 2026] [security2:error] [pid 25882:tid 25882] [client 34.81.10.169:55312] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.aws.corepest.com"] [uri "/.git/HEAD"] [unique_id "avFN0AixXO41TgueZ68EGwAAAAo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Site.eu
2026-11-08 22:08:58
UTC ·
(21 hours ago)
Scanning for secret files (.env, .git, credentials, config backups)
Bad Web Bot
Web App Attack
🇺🇸
IndigoRidge
2026-11-08 20:57:47
UTC ·
(23 hours ago)
[08/Nov/2026:15:57:42.047282 --0500] avDiRosNNjBpyaHvr2TVFgAAARQ 34.81.10.169 40142 205.233.18.17 7081
[08/Nov/2026:15:57:46.718171 --0500] avDiSpHke0F1xe2zPSqCXQAAABg 34.81.10.169 53346 205.233.18.17 7081
[08/Nov/2026:15:57:46.718928 --0500] avDiSpH ...
show more
[08/Nov/2026:15:57:42.047282 --0500] avDiRosNNjBpyaHvr2TVFgAAARQ 34.81.10.169 40142 205.233.18.17 7081
[08/Nov/2026:15:57:46.718171 --0500] avDiSpHke0F1xe2zPSqCXQAAABg 34.81.10.169 53346 205.233.18.17 7081
[08/Nov/2026:15:57:46.718928 --0500] avDiSpHke0F1xe2zPSqCXgAAABY 34.81.10.169 53380 205.233.18.17 7081
[08/Nov/2026:15:57:46.719681 --0500] avDiSpHke0F1xe2zPSqCXwAAAAM 34.81.10.169 53366 205.233.18.17 7081
[08/Nov/2026:15:57:46.726713 --0500] avDiSpHke0F1xe2zPSqCYAAAABI 34.81.10.169 53356 205.233.18.17 7081
...
show less
Hacking
Anonymous
2026-11-08 20:57:44
UTC ·
(23 hours ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
🇩🇪
Holger
2026-11-08 18:54:39
UTC ·
(1 day ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
🇳🇱
debestelapp
2026-11-08 18:00:10
UTC ·
(1 day ago)
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 15:56:23
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:56:19.583616 2026] [security2:error] [pid 6022:tid 602 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 10:56:19.583616 2026] [security2:error] [pid 6022:tid 6022] [client 34.81.10.169:46402] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "thesmithcouple.com"] [uri "/.env"] [unique_id "avCbo_ACsCKhMDvwSGax1AAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 14:57:37
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:57:32.465651 2026] [security2:error] [pid 24269:tid 24 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 09:57:32.465651 2026] [security2:error] [pid 24269:tid 24269] [client 34.81.10.169:37216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "giveorcas.org"] [uri "/.env"] [unique_id "avCN3Fz-OC3e_i5sNR6JTAAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-11-08 13:48:28
UTC ·
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 11:22:28
UTC ·
(1 day ago)
(mod_security) mod_security (id:248270) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:22:22.698313 2026] [security2:error] [pid 24036:tid 24 ...
show more
(mod_security) mod_security (id:248270) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 06:22:22.698313 2026] [security2:error] [pid 24036:tid 24090] [client 34.81.10.169:24268] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\$\\\\{jndi:(ldaps?|rmi|dns|iiop|nis|nds|corba|\\\\$\\\\{(?:lower|upper)):" at REQUEST_HEADERS:Referer. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/30_Apps_OtherApps.conf"] [line "7626"] [id "248270"] [rev "1"] [msg "COMODO WAF: Remote code execution in Apache log4j||sentinelfund.eu|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "OtherApps"] [hostname "sentinelfund.eu"] [uri "/"] [unique_id "avBbbtIy2VkTU1M1ArPf7AAAAhQ"], referer: ${jndi:ldap://127.0.0.1/bifrost-probe}
show less
Brute-Force
Bad Web Bot
Web App Attack
🇧🇪
cmbplf
2026-11-08 11:00:22
UTC ·
(1 day ago)
5.491 4xx requests in 1 hour (1w5d5h)
Brute-Force
Bad Web Bot
Anonymous
2026-11-08 10:31:46
UTC ·
(1 day ago)
Probing for exposed secret / credential files
Hacking
Web App Attack
🇩🇪
wassita
2026-11-08 07:58:26
UTC ·
(1 day ago)
automated scan probing for sensitive/config files — requested path: /.docker/config.json — response: 404
Bad Web Bot
Web App Attack
🇮🇹
VHosting
2026-11-08 07:35:05
UTC ·
(1 day ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack
🇺🇸
TPI-Abuse
2026-11-08 05:36:21
UTC ·
(1 day ago)
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:36:14.585644 2026] [security2:error] [pid 14543:tid 14 ...
show more
(mod_security) mod_security (id:210492) triggered by 34.81.10.169 (169.10.81.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Nov 08 00:36:14.585644 2026] [security2:error] [pid 14543:tid 14543] [client 34.81.10.169:25856] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "lejzerowicz.org"] [uri "/.git/HEAD"] [unique_id "avAKTtp677KqmPcpdrYysgAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack