🇺🇸
TtlPst
2026-11-05 13:52:31
UTC ·
(1 day ago)
App probing / vulnerability scanning in path GET /
Web App Attack
Bad Web Bot
🇺🇸
TPI-Abuse
2026-11-05 10:03:42
UTC ·
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:03:36.535167 2026] [security2:error] [pid 5202:tid 5 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 05:03:36.535167 2026] [security2:error] [pid 5202:tid 5202] [client 34.142.145.90:44790] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "4"] [msg "COMODO WAF: URL file extension is restricted by policy||www.lucasadams.com|F|2"] [data ".lucasadams.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.lucasadams.com"] [uri "/z9x8c7v6b5-debug-trigger-www.lucasadams.com"] [unique_id "auxUeIpkxVyn2erKeQS8dwAAABs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
conure.sh
2026-11-05 09:34:25
UTC ·
(1 day ago)
csagent: score 21.7: 404 noise floor x7, secrets grab x2; 1 domain(s) in 3s
Web App Attack
🇲🇾
Rizzy
2026-11-05 09:15:02
UTC ·
(1 day ago)
Multiple WAF Violations
Brute-Force
Web App Attack
🇺🇸
webgobe
2026-11-05 06:21:29
UTC ·
(2 days ago)
lee-17 : Block hidden directories=>/dist/.vite/manifest.json(/)
Hacking
🇺🇸
TPI-Abuse
2026-11-05 05:45:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:45:19.241504 2026] [security2:error] [pid 12227:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 00:45:19.241504 2026] [security2:error] [pid 12227:tid 12227] [client 34.142.145.90:57496] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpcontacts.marcosbarraza.net"] [uri "/wp-config.php~"] [unique_id "auwX74T1JLbEUVDWaIQWCgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇿🇦
Megasurf
2026-11-05 05:32:01
UTC ·
(2 days ago)
web application attack (blocked by the web application firewall). Blocked automatically by our firewall (LF_MODSEC).
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 01:44:27
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:44:23.921489 2026] [security2:error] [pid 32457:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 20:44:23.921489 2026] [security2:error] [pid 32457:tid 32457] [client 34.142.145.90:41936] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.lovechicks.com"] [uri "/.env.staging.local"] [unique_id "auvfdxOLaVVk9LXa4CrtSwAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇦🇺
artful
2026-11-05 01:15:00
UTC ·
(2 days ago)
Excessive errors ~1k in recent hours
Web App Attack
🇪🇸
masterguru
2026-11-05 00:01:53
UTC ·
(2 days ago)
(cpanel) Failed cPanel login from 34.142.145.90 (SG/Singapore/90.145.142.34.bc.googleusercontent.com): 5 in the last 3600 secs (0-122)
Hacking
🇹🇷
Jova
2026-11-04 23:42:32
UTC ·
(2 days ago)
Requests impersonating 3 different crawlers from one IP.
Bad Web Bot
🇪🇸
masterguru
2026-11-04 22:40:06
UTC ·
(2 days ago)
Inbound Anomaly Score Exceeded (Total Score: 5). Operator GE matched 5 at TX:anomaly_score. (949110-122)
Hacking
🇺🇸
TPI-Abuse
2026-11-04 22:18:56
UTC ·
(2 days ago)
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:18:51.964667 2026] [security2:error] [pid 21726:tid ...
show more
(mod_security) mod_security (id:210492) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:18:51.964667 2026] [security2:error] [pid 21726:tid 21726] [client 34.142.145.90:0] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.marshallcurry.com"] [uri "/.env.prod.local"] [unique_id "auuvSwLoC8TdDipgqHU94AAAAB0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
2026-11-04 22:06:46
UTC ·
(2 days ago)
Blocked by ModSec and CSF
Port Scan
🇺🇸
TPI-Abuse
2026-11-04 22:00:49
UTC ·
(2 days ago)
(mod_security) mod_security (id:210730) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:00:46.792244 2026] [security2:error] [pid 9500:tid 9 ...
show more
(mod_security) mod_security (id:210730) triggered by 34.142.145.90 (90.145.142.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Nov 04 17:00:46.792244 2026] [security2:error] [pid 9500:tid 9500] [client 34.142.145.90:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mail-pmg.com|F|2"] [data ".mail-pmg.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mail-pmg.com"] [uri "/z9x8c7v6b5-debug-trigger-www.mail-pmg.com"] [unique_id "auurDn7x498DdWDp61a0_gAAAAs"]
show less
Brute-Force
Bad Web Bot
Web App Attack
