Anonymous
2026-09-24 09:00:37
(17 hours ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐จ๐ฆ
SSH-Admin
2026-09-24 09:00:15
(17 hours ago)
Probing for Exploits on ns200
Exploited Host
Web App Attack
Anonymous
2026-09-24 05:50:18
(20 hours ago)
34.175.97.98 - - [24/Sep/2026:05:50:17 +0000] "GET /backup/.config/codex/auth.json HTTP/1.1" 503 934 ...
show more
34.175.97.98 - - [24/Sep/2026:05:50:17 +0000] "GET /backup/.config/codex/auth.json HTTP/1.1" 503 9349 "-" "crusader-worker/1.0"
...
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 05:43:52
(20 hours ago)
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Sep 24 01:43:49.146587 2026] [security2:error] [pid 14034:tid 14034] [client 34.175.97.98:52510] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||borzoi-pedigree.info|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "borzoi-pedigree.info"] [uri "/.codex/auth.json.bak"] [unique_id "arS4lfbYmhaK9UzwzzdhLgAAAEk"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐จ๐ฆ
SSH-Admin
2026-09-24 05:32:02
(21 hours ago)
Probing for Exploits on ns74
Exploited Host
Web App Attack
๐ฎ๐ณ
Starburst SysOp Team
2026-09-24 05:19:53
(21 hours ago)
Restricted File Access Attempt. Matched phrase "config.toml" at REQUEST_FILENAME. (930130-bom2-2)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-24 01:36:12
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 21:36:09.111002 2026] [security2:error] [pid 30968:tid 30968] [client 34.175.97.98:36504] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||belmontsprings.ca|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "belmontsprings.ca"] [uri "/.codex/auth.json.bak"] [unique_id "arR-iTqTs1lw-ZYvxz5VqwAAAB4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-09-24 00:14:59
(1 day ago)
Restricted File Access Attempt. Matched phrase "/auth.json" at REQUEST_FILENAME. (930130-195)
Hacking
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 17:49:23
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 13:49:19.317265 2026] [security2:error] [pid 18837:tid 18837] [client 34.175.97.98:33500] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||autodiscover.astglobaltech.com|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "autodiscover.astglobaltech.com"] [uri "/.codex/auth.json.bak"] [unique_id "arQRH4MDNDYc_W3rBwwQIgAAAAw"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 16:59:05
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 12:59:01.208476 2026] [security2:error] [pid 5299:tid 5304] [client 34.175.97.98:45574] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||australialifecoach.com|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "australialifecoach.com"] [uri "/.codex/auth.json.bak"] [unique_id "arQFVXA6zmwRks3tBYKPUQAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-09-23 14:58:18
(1 day ago)
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent ...
show more
(mod_security) mod_security (id:210730) triggered by 34.175.97.98 (98.97.175.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Sep 23 10:58:15.053259 2026] [security2:error] [pid 16950:tid 16950] [client 34.175.97.98:51274] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||arkansasbest.com|F|2"] [data ".json.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "arkansasbest.com"] [uri "/.codex/auth.json.bak"] [unique_id "arPpB5IAb70fn4nBTvcaPQAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
Anonymous
2026-09-23 06:27:51
(1 day ago)
IP matched detection query 20 more in short time bad rqs.
Brute-Force
Web App Attack
Hacking
๐ฌ๐ง
consul.to
2026-09-22 09:50:53
(2 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ฎ๐น
VHosting
2026-09-22 08:15:04
(2 days ago)
Detected WordPress attack from different servers
Brute-Force
Web App Attack