๐ซ๐ท
solution.it
2026-09-16 08:02:00
(1 month ago)
[Wed Sep 16 10:02:00.010689 2026] [php7:error] [pid 1780865:tid 1780865] [client 34.96.160.165:44300 ...
show more
[Wed Sep 16 10:02:00.010689 2026] [php7:error] [pid 1780865:tid 1780865] [client 34.96.160.165:44300] script '/var/www/html/internetriders.org/phpinfo.php' not found or unable to stat
show less
Web App Attack
๐ซ๐ท
dynamix
2026-09-16 06:50:54
(1 month ago)
Automated web vulnerability and path enumeration scan with excessive 404 requests
Bad Web Bot
Web App Attack
๐ง๐ช
taivas.nl
2026-09-16 04:35:01
(1 month ago)
Many_bad_calls
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:52:50
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:52:46.015096 2026] [security2:error] [pid 27669:tid 27715] [client 34.96.160.165:49550] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.pre.ahsdistance.org"] [uri "/.git/config"] [unique_id "aqoEfiEwoaXF3-LyJpb2fwAAAQo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-16 02:23:58
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 22:23:52.734977 2026] [security2:error] [pid 5176:tid 5176] [client 34.96.160.165:40106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.prcomputersolutions.com.anthonyanimalclinic.net"] [uri "/.git/config"] [unique_id "aqn9uCd5FuDMNseh09G1mAAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
netclix.gr
2026-09-16 01:48:25
(1 month ago)
(mod_security) mod_security triggered on hostname [redacted] 34.96.160.165 (HK/Hong Kong/165.160.96. ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.96.160.165 (HK/Hong Kong/165.160.96.34.bc.googleusercontent.com): (CF_ENABLE)
show less
SQL Injection
Anonymous
2026-09-16 01:01:46
(1 month ago)
(wordpress) Failed login wp-login.php or xmlrpc.php
Web App Attack
๐ฉ๐ช
yitzhaq
2026-09-15 23:24:38
(1 month ago)
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "POST / HTTP/1.1" 200 1268 "-" "Mozilla/5.0 (Macintos ...
show more
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "POST / HTTP/1.1" 200 1268 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "GET /.env HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "GET /.env.local HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "GET /.env.production HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
34.96.160.165 - - [16/Sep/2026:01:24:33 +0200] "GET /.env.staging HTTP/1.1" 404 513 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/13
show less
Web App Attack
Hacking
Anonymous
2026-09-15 22:40:04
(1 month ago)
suspicious request in access.log
Web App Attack
๐ง๐ช
taivas.nl
2026-09-15 22:02:11
(1 month ago)
Bad_requests
Bad Web Bot
๐ณ๐ฟ
Tripwire
2026-09-15 20:30:02
(1 month ago)
Scanning for exploits - /.env
Web App Attack
๐ณ๐ฑ
Alt255
2026-09-15 20:19:51
(1 month ago)
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34. ...
show more
[ti-12al] Web exploit scanning: 1 suspicious requests detected by fail2ban jail <name>. Example: 34.96.160.165 - - [15/Sep/2026:22:19:49 +0200] "GET /.git/config HTTP/1.1" 301 620 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 18:54:12
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 14:54:06.767700 2026] [security2:error] [pid 28733:tid 28733] [client 34.96.160.165:60030] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.praedari.com.greighhouse.com"] [uri "/.git/config"] [unique_id "aqmUTm88otpRVHPc26r3VQAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-15 17:03:41
(1 month ago)
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.160.165 (165.160.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 15 13:03:36.190810 2026] [security2:error] [pid 14996:tid 14996] [client 34.96.160.165:39852] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.sagoscapes.com.piratecostumesonline.com"] [uri "/.git/config"] [unique_id "aql6aMWViyE38skF2Yo8xQAAABg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Site.eu
2026-09-15 11:29:18
(1 month ago)
Excessive 404/403 errors
Brute-Force