🇺🇸
TPI-Abuse
2026-09-08 15:17:56
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 11:17:49.559135 2026] [security2:error] [pid 19561:tid 19561] ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 08 11:17:49.559135 2026] [security2:error] [pid 19561:tid 19561] [client 34.96.48.2:20462] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.117"] [uri "/.htaccessd5ffd2e3b68f41e49646aa1ef1bc39333fe95f6d4ee54eaea96e02433f035cf59ef15ad0c21f4423beaab06badc64173"] [unique_id "aqAnHXdELPBaFYwOVdMz8QAAACM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇩🇪
burlacu.org
2026-09-02 19:06:03
UTC ·
(2 months ago)
Nginx multi-log analysis detected: admin_probe. Evidence: Admin panel probing with 50 attempts. Blocked automatically.
Hacking
Brute-Force
🇳🇿
Antinson
2026-09-02 06:12:36
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇺🇸
Starburst SysOp Team
2026-09-02 05:20:25
UTC ·
(2 months ago)
Host header is a numeric IP address. Pattern match "(?:^( (920350-mnz6-7)
Hacking
Bad Web Bot
🇺🇸
TPI-Abuse
2026-09-02 02:44:08
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:44:01.352321 2026] [security2:error] [pid 5248:tid 5248] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Sep 01 22:44:01.352321 2026] [security2:error] [pid 5248:tid 5248] [client 34.96.48.2:19991] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.230"] [uri "/.htaccess9a4f73f5a3994eb78a04a15a6278564ef7ce67482a3b495d905355a04c8878c7bc358f86a0ab4fffb31888b463868624"] [unique_id "apeNcUkoHFeEwepHtcWDigAAAAg"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇫🇷
LiloBzH
2026-09-02 01:09:05
UTC ·
(2 months ago)
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200] "GET /web/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0"
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200] "GET /backend/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0"
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200 ...
show more
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200] "GET /web/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0"
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200] "GET /backend/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0"
34.96.48.2 - - [02/Sep/2026:03:09:04 +0200] "GET /config/.git/config HTTP/1.1" 404 118 "-" "Mozilla/5.0"
show less
Web App Attack
🇺🇸
jormaster3k
2026-09-01 21:22:08
UTC ·
(2 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇮🇱
spd.co.il
2026-09-01 16:01:55
UTC ·
(2 months ago)
Unauthorized access attempts on ports: 80
Port Scan
🇳🇿
Antinson
2026-08-27 10:52:37
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot
🇧🇾
lns.bz
2026-08-26 22:45:11
UTC ·
(2 months ago)
Too many 404 requests [BY]
Web App Attack
🇺🇸
TPI-Abuse
2026-08-26 21:57:24
UTC ·
(2 months ago)
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:57:15.960029 2026] [security2:error] [pid 5258:tid 5283] [ ...
show more
(mod_security) mod_security (id:210492) triggered by 34.96.48.2 (2.48.96.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Aug 26 17:57:15.960029 2026] [security2:error] [pid 5258:tid 5283] [client 34.96.48.2:38258] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htaccess" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "192.64.150.127"] [uri "/.htaccess8ae6ad28157a47b09624521c40b3b9600bf2cc08c04047349d60b552ac5c055f5cff2a88bf544ff38e9d192782c66654"] [unique_id "ao9hO2jmgWN1l4h6zxMHfQAAAJU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇳🇱
Savvii
2026-08-26 13:43:52
UTC ·
(2 months ago)
15 attempts against mh-modsecurity-ban on shelf
Brute-Force
Web App Attack
🇩🇪
Savvii
2026-08-26 13:00:26
UTC ·
(2 months ago)
20 attempts against mh-misbehave-ban on heat
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
jormaster3k
2026-08-26 12:14:52
UTC ·
(2 months ago)
Attack against Apache (too many 404s)
Web App Attack
🇳🇿
Antinson
2026-08-26 10:14:22
UTC ·
(2 months ago)
Requests to unauthorized or suspicious endpoints (.git, .well-known, .php, etc.)
Bad Web Bot