๐ฉ๐ช
Holger
2026-10-14 06:17:38
(5 days ago)
WordPress WebAttack
Brute-Force
Web App Attack
๐ฉ๐ช
Holger
2026-10-10 03:57:37
(1 week ago)
Bruteforce WebAttack
Brute-Force
Web App Attack
๐บ๐ธ
Secure Gatewayยฎ๏ธ
2026-10-09 22:00:46
(1 week ago)
Report By Secure Gateway Security Team: Unauthorized Connection Attempt
Hacking
๐บ๐ธ
ALSCOยฎ๏ธ
2026-10-09 22:00:46
(1 week ago)
Report By ALSCO Security Team: Brute Force Login Attempt
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 06:27:21
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 09 02:27:17.311159 2026] [security2:error] [pid 31620:tid 31706] [client 34.141.6.245:43472] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||infectioncontrolsys.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "infectioncontrolsys.com"] [uri "/z9x8c7v6b5-debug-trigger-infectioncontrolsys.com"] [unique_id "asiJRQFbgKyfzOZ6Ddk3LgAAAhQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
Hazzard
2026-10-09 05:23:56
(1 week ago)
(PERMBLOCK) 34.141.6.245 (DE/Germany/Hesse/Frankfurt am Main/245.6.141.34.bc.googleusercontent.com/[ ...
show more
(PERMBLOCK) 34.141.6.245 (DE/Germany/Hesse/Frankfurt am Main/245.6.141.34.bc.googleusercontent.com/[redacted]) has had more than 4 temp blocks
show less
Hacking
๐ซ๐ท
Zundapper
2026-10-09 05:03:36
(1 week ago)
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /signin HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macin ...
show more
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /signin HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /auth HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /users/login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /auth/login HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
34.141.6.245 - - [09/Oct/2026:07:03:36 +0200] "GET /signup HTTP/2.0" 404 167 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Saf
...
show less
Web App Attack
Port Scan
๐ฉ๐ช
svr
2026-10-09 04:17:00
(1 week ago)
Abusive Automated Web Scanner
Web App Attack
๐ฆ๐บ
AWW-Admin
2026-10-09 04:15:08
(1 week ago)
(mod_security) mod_security triggered on hostname [redacted] 34.141.6.245 (DE/Germany/245.6.141.34.b ...
show more
(mod_security) mod_security triggered on hostname [redacted] 34.141.6.245 (DE/Germany/245.6.141.34.bc.googleusercontent.com)
show less
SQL Injection
๐บ๐ธ
TPI-Abuse
2026-10-09 03:55:07
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:55:03.938216 2026] [security2:error] [pid 5281:tid 5281] [client 34.141.6.245:48846] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||hppagewidetampa.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hppagewidetampa.com"] [uri "/z9x8c7v6b5-debug-trigger-hppagewidetampa.com"] [unique_id "ashll8omekkYMRAlyOjtngAAAAI"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
Mundo Bueno
2026-10-09 03:34:37
(1 week ago)
[ISILIA Protection v2.3] Tentative d'accรจs: /@fs/..%252f..%252f..%252f..%252f..%252froot/.env [RATE ...
show more
[ISILIA Protection v2.3] Tentative d'accรจs: /@fs/..%252f..%252f..%252f..%252f..%252froot/.env [RATE LIMITED - 1800s quarantine] | Pays: DE | UA: Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)
show less
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-09 03:15:18
(1 week ago)
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.141.6.245 (245.6.141.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 08 23:15:14.990057 2026] [security2:error] [pid 8673:tid 8673] [client 34.141.6.245:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||hondabvi.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "hondabvi.com"] [uri "/z9x8c7v6b5-debug-trigger-hondabvi.com"] [unique_id "ashcQonxlAr8aRhQSkJt2gAAAB8"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ฉ๐ช
svr
2026-10-09 03:08:42
(1 week ago)
HC-Flood Web Scanner
Web App Attack
๐ธ๐ช
vaia.cloud
2026-10-09 03:00:02
(1 week ago)
crowdsecurity/http-admin-interface-probing
Brute-Force
Web App Attack
๐ฉ๐ช
simsung
2026-10-09 02:58:52
(1 week ago)
34.141.6.245 - - [09/Oct/2026:02:58:51 +0000] "GET /.env.development::$DATA?raw HTTP/2.0" 403 146 "- ...
show more
34.141.6.245 - - [09/Oct/2026:02:58:51 +0000] "GET /.env.development::$DATA?raw HTTP/2.0" 403 146 "-" "Mozilla/5.0 (compatible; Qwenbot/1.0; +https://qwen.alibaba.com/)"
...
show less
Bad Web Bot