|
🇩🇪
arthome.info
|
|
hundreds of 404, like /api.tar.bz2
|
Port Scan
Brute-Force
Web App Attack
|
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri May 15 04:16:17.931624 2026] [security2:error] [pid 20706:tid 20706] [client 34.18.146.154:50468] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.chiggerland.digifonics.com|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.chiggerland.digifonics.com"] [uri "/api.sql"] [unique_id "agbWUQ5-6fjZa9xUvwOS7wAAAAk"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 21:04:10.473275 2026] [security2:error] [pid 20602:tid 20602] [client 34.18.146.154:33238] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||thechildrenscharity.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "thechildrenscharity.net"] [uri "/api.sql"] [unique_id "agZxCjkJqr1FPu0UrL09_wAAADo"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
🇳🇱
wlt-blocker
|
|
Unauthorized access to webpage admin
|
Web App Attack
|
|
|
🇺🇸
TPI-Abuse
|
|
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleuserconte ...
show more
(mod_security) mod_security (id:210730) triggered by 34.18.146.154 (154.146.18.34.bc.googleusercontent.com): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu May 14 10:06:17.707218 2026] [security2:error] [pid 31425:tid 31425] [client 34.18.146.154:46992] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||kirt.kmp.net|F|2"] [data ".sql"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "kirt.kmp.net"] [uri "/api.sql"] [unique_id "agXW2WLJzsPeUxdv4Pf_xwAAAAs"]
show less
|
Brute-Force
Bad Web Bot
Web App Attack
|
|
|
Anonymous
|
|
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:13:57:23 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:13:57:24 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:13:57:24 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:13:57:25 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:13:57:26 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
|
Port Scan
|
|
|
🇨🇦
Not Fake
|
|
$f2bV_matches
|
Web App Attack
|
|
|
Anonymous
|
|
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:09:41:31 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:09:41:31 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:09:41:32 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:09:41:32 +0000] "GET /.env.tar HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:09:41:33 +0000] "GET /.env.tar.bz2 HTTP/1.1"
show less
|
Port Scan
|
|
|
🇳🇱
e.fierstra
|
|
ModSecurity hits exceeded
|
Bad Web Bot
Web App Attack
|
|
|
🇨🇭
zynex
|
|
URL Probing: /fr/website_backup.tar.gz
|
Web App Attack
|
|
|
🇳🇱
Site.eu
|
|
Excessive multi-domain requests
|
Brute-Force
|
|
|
Anonymous
|
|
Multiple web server 400 error codes from same source ip
|
Web App Attack
|
|
|
Anonymous
|
|
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): ...
show more
(caddyscan) Scanner path probe from 34.18.146.154 (QA/Qatar/154.146.18.34.bc.googleusercontent.com): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: [REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:00:32:46 +0000] "GET /.env.zip HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:00:32:47 +0000] "GET /.env.tar.gz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:00:32:50 +0000] "GET /.env.7z HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:00:32:50 +0000] "GET /.env.tgz HTTP/1.1"
[REDACTED] 200 2627 34.18.146.154 - - [14/May/2026:00:32:51 +0000] "GET /.env.rar HTTP/1.1"
show less
|
Port Scan
|
|