๐ซ๐ท
masterguru
2026-06-15 01:45:28
(1 day ago)
Restricted File Access Attempt. Matched phrase "compose.yml" at REQUEST_FILENAME. (930130-193)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 01:39:21
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 21:39:16.792034 2026] [security2:error] [pid 30647:tid 30647] [client 34.129.87.221:35778] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||powdercoatovens.net|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "powdercoatovens.net"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9XxJdND1jIbf8iHtoymwAAAEs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-15 00:39:19
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sun Jun 14 20:39:14.857143 2026] [security2:error] [pid 31019:tid 31024] [client 34.129.87.221:37698] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||michaelrandon.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "michaelrandon.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai9JsrHkKShrBaxWMMY1WgAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
ghostwarriors
2026-06-14 23:20:06
(1 day ago)
Attempts against non-existent wp-login
Brute-Force
Web App Attack
๐ณ๐ฑ
Savvii
2026-06-14 23:15:26
(1 day ago)
20 attempts against mh-misbehave-ban on redirect
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
grassau.com
2026-06-14 22:05:47
(1 day ago)
*Port Scan* detected from 34.129.87.221 (AU/Australia/Victoria/Melbourne/221.87.129.34.bc.googleuser ...
show more
*Port Scan* detected from 34.129.87.221 (AU/Australia/Victoria/Melbourne/221.87.129.34.bc.googleusercontent.com).
show less
Port Scan
๐ซ๐ท
Octopuce
2026-06-14 21:03:10
(1 day ago)
Aggressive web search of vulnerable pages: /docker-compose.yml /docker-compose.prod.yml /docker-comp ...
show more
Aggressive web search of vulnerable pages: /docker-compose.yml /docker-compose.prod.yml /docker-compose.staging.yml /docker-compose.local.yml / ...
show less
Web App Attack
๐ฉ๐ช
CK_beats
2026-06-14 13:15:08
(1 day ago)
Blocked by os-abuseipdb on OPNsense firewall KN-FW01; 199 hits, proto=tcp, ports=443,80
Port Scan
Hacking
๐ณ๐ฑ
ConsulHosting
2026-06-14 07:17:34
(1 day ago)
Excessive failed CAPTCHA attempts (CAPTCHA DoS)
Web App Attack
๐ฎ๐น
VHosting
2026-06-14 04:25:04
(1 day ago)
Detected WordPress attack from 4 different servers
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-06-14 03:45:14
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.129.87.221 (221.87.129.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jun 13 23:45:08.010428 2026] [security2:error] [pid 17518:tid 17518] [client 34.129.87.221:40200] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||richardpetersbooks.easyweb-publishing.com|F|2"] [data ".db"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "richardpetersbooks.easyweb-publishing.com"] [uri "/.config/gcloud/credentials.db"] [unique_id "ai4jxDlWAxqWMhPaSWASxQAAAGA"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ณ๐ฑ
Cloud86 B.V.
2026-06-14 02:39:03
(2 days ago)
categories: DDoS Attack
DDoS Attack