|
🇺🇸
mnsf
|
|
Too many Status 40X (20)
|
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 23:52:46.786304 2025] [security2:error] [pid 23423:tid 23423] [client 134.209.3.207:43424] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "wetlizarddiveteam.com"] [uri "/.env"] [unique_id "aU4UnnRuzqG45bMxS953kAAAACg"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 23:05:49.938753 2025] [security2:error] [pid 21478:tid 21498] [client 134.209.3.207:57723] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||visionforandfromchildren.org|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "visionforandfromchildren.org"] [uri "/aa.bak"] [unique_id "aU4JnQB0EEMLav1Edg2bcQAAAEY"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
Lino Project
|
|
134.209.3.207 - - [25/Dec/2025:22:23:03 +0100] "GET /adminer-5.3.0-mysql-en.php HTTP/1.1" 301 4112 " ...
show more
134.209.3.207 - - [25/Dec/2025:22:23:03 +0100] "GET /adminer-5.3.0-mysql-en.php HTTP/1.1" 301 4112 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
134.209.3.207 - - [25/Dec/2025:22:23:04 +0100] "GET /adminer-5.3.0-mysql-en.php HTTP/1.1" 404 139899 "https://primobio.it/adminer-5.3.0-mysql-en.php" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
134.209.3.207 - - [25/Dec/2025:22:24:12 +0100] "GET /adminer-4.7.6.php HTTP/1.1" 301 4103 "-" "Mozilla/5.0 (Linux; Android 6.0.1; Nexus 5X Build/MMB29P) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.6367.201 Mobile Safari/537.36 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
...
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
Multiple web server 400 error codes from same source ip
|
Web App Attack
|
|
|
Anonymous
|
|
Blocked: Reason='Auto-block'; Requests=0
|
Hacking
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Dec 25 06:08:11.100864 2025] [security2:error] [pid 28668:tid 28668] [client 134.209.3.207:47560] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||antoniocobo.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "antoniocobo.com"] [uri "/htdocs.bak"] [unique_id "aU0bG3pD2LC6UE5libiRhwAAABk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 23:50:03.227786 2025] [security2:error] [pid 21094:tid 21094] [client 134.209.3.207:58572] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "georgelaceysales.com"] [uri "/.env"] [unique_id "aUzCe2e2Nf4ffZB3ZBbJDgAAAAI"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 23:10:26.015668 2025] [security2:error] [pid 27097:tid 27097] [client 134.209.3.207:53512] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||koolcoastalnights.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "koolcoastalnights.com"] [uri "/site.bak"] [unique_id "aUy5Mq9eE2Wx6rD7rrDgMAAAAAc"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇩🇪
big-cloud.nl
|
|
Try to access /.env
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 13:36:17.530141 2025] [security2:error] [pid 29422:tid 29422] [client 134.209.3.207:47998] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||aktkaro.com|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "aktkaro.com"] [uri "/public_html.bak"] [unique_id "aUwyoTxb0UHYpnKFehxjXgAAAAE"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇬🇧
Globe2
|
|
ModSec - Multiple 403s within a short period of time [server: H3]
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210492) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Dec 24 06:53:10.455799 2025] [security2:error] [pid 23960:tid 23960] [client 134.209.3.207:36494] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "sublimationconsultants.com"] [uri "/.env"] [unique_id "aUvUJgGUtkoH-wlvnlCfdwAAABw"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
suspicious behavior
|
Blog Spam
Brute-Force
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Port ...
show more
(mod_security) mod_security (id:210730) triggered by 134.209.3.207 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Tue Dec 23 22:34:01.091834 2025] [security2:error] [pid 24839:tid 24839] [client 134.209.3.207:50305] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||oposicionesyconcursos.es|F|2"] [data ".bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "oposicionesyconcursos.es"] [uri "/admin.bak"] [unique_id "aUtfKZgVGdok3wrhBLjwyAAAABM"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|