๐บ๐ธ
TPI-Abuse
2026-10-03 05:29:09
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.178.208.23 (23.208.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.208.23 (23.208.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 03 01:29:05.734090 2026] [security2:error] [pid 2543:tid 2543] [client 34.178.208.23:46100] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.paragontechusa.com"] [uri "/.htpasswd"] [unique_id "asCSoeM44C1ivomTznQ7pgAAAAY"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐น๐ญ
thaizone.com
2026-10-03 04:09:28
(5 days ago)
Hacking attempts against websites (D1) #2
Web App Attack
Hacking
๐บ๐ธ
TPI-Abuse
2026-10-03 01:55:49
(5 days ago)
(mod_security) mod_security (id:210730) triggered by 34.178.208.23 (23.208.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.178.208.23 (23.208.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 21:55:44.513613 2026] [security2:error] [pid 4273:tid 4273] [client 34.178.208.23:39254] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||grimone.com|F|2"] [data ".com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "grimone.com"] [uri "/z9x8c7v6b5-debug-trigger-grimone.com"] [unique_id "asBgoLQXwqM4Nx-X4jww9wAAABc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
masterguru
2026-10-03 01:41:58
(5 days ago)
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .b ...
show more
URL file extension is restricted by policy. String match within ".ani/ .asa/ .asax/ .ascx/ .back/ .backup/ .bak/ .bck/ .bk/ .bkp/ .bat/ .cdx/ .cer/ .cfg/ .cmd/ .cnf/ .com/ .compositefont/ .config/ .conf/ .copy/ .crt/ .cs/ .csproj/ .csr/ .dat/ .db/ .dbf/ .dist/ .dll/ .dos/ .dpkg-dist/ .drv/ .gadget/ .hta/ .htr/ .htw/ .ida/ .idc/ .idq/ .inc/ .inf/ .ini/ .jks/ .jse/ .key/ .licx/ .lnk/ .log/ .mdb/ .msc/ .ocx/ .old/ .pass/ .pdb/ .pfx/ .pif/ .pem/ .pol/ .prf/ .printer/ .pwd/ .rdb/ .rdp/ .reg/ .resources/ .resx/ .sav/ .save/ .scr/ .sct/ .sh/ .shs/ .sql/ .sqlite/ .sqlite3/ .swap/ .swo/ .swp/ .sys/ .temp/ .tfstate/ .tlb/ .tmp/ .vb/ .vbe/ .vbs/ .vbproj/ .vsdisco/ .vxd/ .webinfo/ .ws/ .wsc/ .wsf/ .wsh/ .xsd/ .xsx/" at TX:extension. (920440-193)
show less
Hacking
๐ณ๐ฑ
Site.eu
2026-10-03 01:39:02
(5 days ago)
Excessive multi-domain requests
Brute-Force
๐ณ๐ฑ
debestelapp
2026-10-03 01:15:06
(5 days ago)
Web App Attack
๐น๐ท
kie
2026-10-03 00:36:33
(5 days ago)
03-10-2026:00:36:32UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git ...
show more
03-10-2026:00:36:32UTC [Nginx Web Server] Suspicious web request: path:/.env path:/.aws/ path:/.git (169 request(s)).
show less
Bad Web Bot
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-03 00:24:55
(5 days ago)
(mod_security) mod_security (id:210492) triggered by 34.178.208.23 (23.208.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210492) triggered by 34.178.208.23 (23.208.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 20:24:48.379543 2026] [security2:error] [pid 7392:tid 7392] [client 34.178.208.23:48004] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "cpanel.paulsingdahlsen.com"] [uri "/.htpasswd"] [unique_id "asBLUNVR7YNaimrTCmxj9QAAAAU"]
show less
Brute-Force
Bad Web Bot
Web App Attack
๐ซ๐ท
COMAITE
2026-10-02 23:04:48
(5 days ago)
Suspicious URL access.
Web App Attack
๐น๐ญ
thaizone.com
2026-10-02 22:29:21
(5 days ago)
Hacking attempts against websites (D1) #1
Web App Attack
Hacking
๐ฌ๐ง
consul.to
2026-10-02 22:03:06
(5 days ago)
Web attack/malicious scanning detected
Web App Attack
๐ซ๐ท
masterguru
2026-10-02 19:15:14
(5 days ago)
Remote Command Execution: Direct Unix Command Execution. Pattern match "(?i)(?:^|b (932250-195)
Hacking
๐ฟ๐ฆ
conure.sh
2026-10-02 18:28:48
(5 days ago)
csagent: score 17.2: 404 noise floor x29, wp-config backup grab x1; 1 domain(s) in 1s
Web App Attack
๐ต๐ฑ
strefapi_com
2026-10-02 17:52:42
(6 days ago)
Brute-force, web
...
Hacking
Brute-Force
Web App Attack
๐บ๐ธ
TPI-Abuse
2026-10-02 17:46:42
(6 days ago)
(mod_security) mod_security (id:210730) triggered by 34.178.208.23 (23.208.178.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.178.208.23 (23.208.178.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 02 13:46:38.463051 2026] [security2:error] [pid 22274:tid 22287] [client 34.178.208.23:0] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.mindgardens.com|F|2"] [data ".mindgardens.com"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.mindgardens.com"] [uri "/z9x8c7v6b5-debug-trigger-www.mindgardens.com"] [unique_id "ar_t_oADHOKC2rI8HPod-gAAAMQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack