π³π±
Savvii
2026-10-11 12:36:44
(1 day ago)
20 attempts against mh-misbehave-ban on choy
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 05:08:55
(1 day ago)
(mod_security) mod_security (id:210580) triggered by 34.83.180.100 (100.180.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210580) triggered by 34.83.180.100 (100.180.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 01:08:50.910595 2026] [security2:error] [pid 15113:tid 15113] [client 34.83.180.100:46652] ModSecurity: Access denied with code 403 (phase 2). Matched phrase "proc/self/environ" at ARGS:filename. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/08_Global_Other.conf"] [line "57"] [id "210580"] [rev "2"] [msg "COMODO WAF: OS File Access Attempt||riverflow.com|F|2"] [data "Matched Data: proc/self/environ found within ARGS:filename: file:/proc/self/environ"] [severity "CRITICAL"] [tag "CWAF"] [tag "Other"] [hostname "riverflow.com"] [uri "/__vite_rsc_findSourceMapURL"] [unique_id "assZ4mSviCDn7xXQrOZnFQAAAA8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π³π±
debestelapp
2026-10-11 04:40:09
(1 day ago)
Web App Attack
Anonymous
2026-10-11 04:36:10
(1 day ago)
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /forgot-password HTTP/1.1" 404 53703
34.83.180.1 ...
show more
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /forgot-password HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /auth HTTP/1.1" 404 53702
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /account HTTP/1.1" 404 53702
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /sign-in HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /backoffice HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /user/login HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /portal HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /app HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /auth/login HTTP/1.1" 404 53703
34.83.180.100 - - [11/Oct/2026:06:36:07 +0200] "GET /account/login HTTP/1.1" 404 53702
...
show less
Web Spam
Web App Attack
πΈπ¬
naveeddaros
2026-10-11 04:27:40
(1 day ago)
HTTP Flood DDoS attack detected
Brute-Force
Bad Web Bot
πΊπΈ
TPI-Abuse
2026-10-11 04:07:49
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Oct 11 00:07:43.439434 2026] [security2:error] [pid 26672:tid 26672] [client 34.83.180.100:47976] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||leagueloch.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "leagueloch.com"] [uri "/z9x8c7v6b5-debug-trigger-leagueloch.com"] [unique_id "assLjzbTideKTBrvdLNK_AAAAAk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
πΊπΈ
Power Ca
2026-10-11 03:51:14
(1 day ago)
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /z9x8c7v6b5-debug-trigger-leaderscartel.com HTTP ...
show more
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /z9x8c7v6b5-debug-trigger-leaderscartel.com HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /build/manifest.json HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /9ndgbxbs4z56ioopo8se HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; cohere-ai; +https://cohere.com/crawler)"
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /k7wa8sjzuroh7c1jo2kn HTTP/2.0" 404 123 "-" "Mozilla/5.0 (compatible; Hunyuan/1.0; +https://hunyuan.tencent.com/)"
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /dist/manifest.json HTTP/2.0" 404 185 "-" "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Mobile Safari/537.36"
34.83.180.100 - - [11/Oct/2026:03:51:13 +0000] "GET /dist/.vite/manifest.jso
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 03:47:25
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 23:47:20.721369 2026] [security2:error] [pid 29417:tid 29465] [client 34.83.180.100:33184] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lead-sleds.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lead-sleds.com"] [uri "/z9x8c7v6b5-debug-trigger-lead-sleds.com"] [unique_id "assGyFUrSO5xH_maNbk3AgAAARI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
π¨π¦
zXero
2026-10-11 03:15:10
(1 day ago)
Fail2Ban automatic report - jail: web-exploit
Brute-Force
SSH
DDoS Attack
π§πͺ
cmbplf
2026-10-11 02:32:16
(1 day ago)
7.604 requests with url.path *.env
2.125 requests with url.path */@fs/*
609 requests with url.pat ...
show more
7.604 requests with url.path *.env
2.125 requests with url.path */@fs/*
609 requests with url.path */proc/*
355 requests with url.path *.aws/*
show less
Brute-Force
Bad Web Bot
π·π΄
clauss
2026-10-11 02:07:32
(1 day ago)
34.83.180.100 - - [11/Oct/2026:05:07:31 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 ...
show more
34.83.180.100 - - [11/Oct/2026:05:07:31 +0300] "GET /rclone.conf HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Meta-WebIndexer/1.0; +https://developers.facebook.com/docs/sharing/webmasters/crawler)"
34.83.180.100 - - [11/Oct/2026:05:07:31 +0300] "GET /__vite_rsc_findSourceMapURL?filename=file:///root/.aws/credentials&environmentName=rsc HTTP/2.0" 301 0 "-" "Mozilla/5.0 (compatible; MoonshotBot/1.0; +https://kimi.ai/)"
...
show less
Web App Attack
π©πͺ
4server
2026-10-11 02:00:43
(1 day ago)
[SunOct1104:00:41.3180222026][security2:error][pid1819182:tid1819276][client34.83.180.100:0]ModSecur ...
show more
[SunOct1104:00:41.3180222026][security2:error][pid1819182:tid1819276][client34.83.180.100:0]ModSecurity:Accessdeniedwithcode403\(phase2\).Stringmatchwithin\".asa/.asax/.ascx/.backup/.bak/.bat/.cdx/.cer/.cfg/.cmd/.com/.config/.conf/.cs/.csproj/.csr/.dat/.db/.dbf/.dll/.dos/.htr/.htw/.ida/.idc/.idq/.inc/.ini/.key/.licx/.lnk/.log/.mdb/.old/.pass/.pdb/.pol/.printer/.pwd/.rdb/.resources/.resx/.sql/.swp/.sys/.vb/.vbs/.vbproj/.vsdisco/.webinfo/.xsx/\"atTX:extension.[file\"/etc/apache2/conf.d/modsec_rules/00_asl_zz_strict.conf\"][line\"91\"][id\"390716\"][rev\"2\"][msg\"Atomicorp.comWAFRules:URLfileextensionisrestrictedbypolicy\"][data\".com\"][severity\"ERROR\"][hostname\"laumeiconsulting.com\"][uri\"/z9x8c7v6b5-debug-trigger-laumeiconsulting.com\"][unique_id\"asrtyekHy7Ve0x_C91b9igAAAMI\"]
show less
Port Scan
Brute-Force
Web App Attack
πͺπΈ
masterguru
2026-10-11 01:49:01
(1 day ago)
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000 ...
show more
BAD BOT - Detected and Blocked.. Matched phrase "bytespider" at REQUEST_HEADERS:User-Agent. (1100000-122)
show less
Bad Web Bot
π³π±
Alt255
2026-10-11 01:40:32
(1 day ago)
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Exam ...
show more
[cb-01al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail apache-scanner. Example: 34.83.180.100 - - [11/Oct/2026:03:40:27 +0200] "GET /api/.env HTTP/2.0" 404 1338 "-" "Mozilla/5.0 (compatible; GrokBot/1.0; +https://x.ai/)"
...
show less
Bad Web Bot
Web App Attack
πΊπΈ
TPI-Abuse
2026-10-11 01:34:09
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.83.180.100 (100.180.83.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 10 21:34:05.244698 2026] [security2:error] [pid 2572:tid 2591] [client 34.83.180.100:40150] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||lasertagandgames.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "lasertagandgames.com"] [uri "/z9x8c7v6b5-debug-trigger-lasertagandgames.com"] [unique_id "asrnjc6BQpTO8AsmsIyNCQAAAQ8"]
show less
Brute-Force
Bad Web Bot
Web App Attack